awesome-readme

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow runs scripts/inspect_project.py --root <repository> --target <README-path>, which reads UTF-8 content from the repository’s README and other in-scope “required evidence” files (including SKILL.md and instruction-named docs), meaning outsider-submitted repo text can be ingested at runtime.