repomix

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). This skill can fetch and pack arbitrary public repositories (e.g., the --remote https://github.com/user/repo option and the pack_remote_repository MCP tool), meaning it ingests untrusted, user-generated content from GitHub for the agent to read and provide to LLMs.