opencontext

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). OpenContext’s required runtime workflow ingests repo/project files via oc folder ls, oc doc ls, oc search, and oc context manifest and then uses that read content to form the load/search/store packet, so outsider-authored text can be included by anyone who can submit content into the monitored repository/docs/decisions.