buf-cli-lint-breaking-build

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime, the workflow runs buf build, buf lint, and buf breaking on the repository contents of an incoming PR (including outsider-authored .proto text), so the LLM is exposed to that free text via the build/lint/breaking outputs and any included .proto content it parses.