go-live-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow reads outsider-authored free text from the audited repository at runtime (e.g., README/docs/spec/CLAUDE.md and code comments) via the finder/verify agents’ “read the actual code/spec” steps, which can include prompt-injection content authored by parties other than the operating user.