soc-integrate

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The soc-integrate MCP toolchain runs local CLI parsing over Verilog source passed in by the caller (e.g., soc_update reads submodule file paths from the provided integrate config and then extract_modules reads those files’ free text at runtime), so an outsider can supply/submit crafted HDL text via the workflow inputs.