repo-understand

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s workflow ingests “high-signal docs (README, syllabus, indexes)” and “repository root and visible structure” at runtime, which are outsider-authored free text when the repository is not authored by the operating user (e.g., a third-party Git repo), and the agent reads those docs to build the curriculum map.