vulnerability-scanner

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow of scripts/security_scan.py reads outsider-authored free text by opening and scanning files under the provided project_path (e.g., scan_secrets and scan_code_patterns use open(...).read() and regexes on file contents), so an attacker can poison the repository content that the script ingests.