sast-config

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md describes an auto-invoked SAST configuration review that reads repository files via Glob/Grep (e.g., .semgrep.yml/.ql/.github/workflows/*.yml) and treats their contents as untrusted data to analyze, meaning outsider-authored free text in those files can be ingested at runtime without selecting a specific item first.