soia-env-qoder-cli-install

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Required runtime workflow reads only local trusted files (references/cli-profile.json) and executes local checks (scripts/inspect_cli.py, scripts/check_latest.py) where the only fetched text is provider metadata (npm registry JSON via https://registry.npmjs.org/.../latest), not outsider-authored free text submitted via a queue/feed the workflow monitors.