repo-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Sourcegraph/gh workflows are only triggered by provider-side selection rules (single repo, identifier searches, or explicit issue/pr/file viewing), and the fallback git-clone.sh requires a specific repo URL/owner/repo argument rather than ingesting arbitrary outsider-authored free text by default.