understand-change

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow reads a git diff/commit/PR description (Step 2: “Read the change in full” including PR description) provided as a commit/PR/path argument, which means an outsider could potentially supply poison via externally authored PR text/diffs that the agent ingests at runtime.