private-github-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Required runtime workflow uses a locally run GitHub mirror sync script that runs gh repo list/clone and git fetch to read repository contents into ~/repo-mirror/repos, so outsider-authored free text from third-party repo data can be ingested into the local search index via the user’s configured GitHub accounts.