repo-governance

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md/governance.py builds a local governance plan by reading the target repository’s files (e.g., CONTRIBUTING.md, AGENTS.md, README.md, provider imports, and CODEOWNERS) which can include outsider-authored free text (like issue/PR submissions) when those are committed or otherwise present in-repo at runtime.