devstudio

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow watches and re-reads outsider-authored plugin Markdown/JSON files from the specified local plugin directory (e.g., HotReloader re-read plugin.json and markdown resources on file changes), so an outsider who can get their text into that directory can poison the LLM-ingested content.