file-organizer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the File Organizer workflow, the agent ingests outsider-authored free text indirectly from the user/tenant’s local files by running directory listing and file-type inspection commands (e.g., ls/find/file/du) over a user-selected target_directory, and then uses that content to propose moves/renames.