consent-registry

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s required runtime workflow queries python3 "$AARON_SKILLS_ROOT/scripts/registry-events.py" is-suppressed <subject-id>, which replays memory/events/consent.ndjson (authoritative projection input) and therefore exposes the agent to outsider-authored free text only if an outsider can inject it into that events stream.