multi-host-live-mount

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow ingests external collaborative content like Linear issues, GitHub PR metadata, Notion pages, and Slack messages via Relayfile mounts and cloud synchronization.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill documents instructions and operations for mounting workspaces, joining fleets, verifying caches, and managing agent relays (relayfile mount, agent-relay fleet spawn). While the documentation references file mutations and writes (e.g. writing JSON files that trigger provider mutations/writebacks), these operations represent configuration management, development tasks, and file-based syncing within a virtualized workspace client, rather than direct financial transactions, payments, or money transfers. Therefore, the financial scope is indirect (documenting billable/writable synchronization use cases) or non-financial configuration.