dev-contribution-quality-analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Required workflow ingests outsider-authored commit subjects, file lists, and MR/PR subjects from user-provided CSVs (extract-contribution-profile.py reads raw-commits.csv and mr-acceptances.csv and uses their subject/metadata for scoring), so a text submitter can poison those fields without first selecting an item.