portal-router

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The runtime path cmd_show → sys.stdout.write(Path(rec["path"]).read_text(...)) ingests free-form Markdown body/frontmatter from mirrored outsider-authored ecosystem directories under ~/_arms/mirror/ (e.g., Claude/Codex/Gemini/OpenCode/OpenClaw/a-i--skills), which are not authored by the operating user.