heartbeat

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Runtime path reads first-party repo files (memory/MEMORY.md, memory/logs/*.md, memory/cron-state.json, aeon.yml, and optionally local output/articles/token-report-*.md) and only runs GitHub CLI queries for PRs/issues rather than ingesting arbitrary outsider-authored free text without a specific selection step.