omp-delegate

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). In scripts/relay.mjs, the relay reads an orchestrator-provided brief from a local file or stdin and pipes it to omp --mode json via child stdin, so outsider-authored free text only becomes an LLM input if an outsider can supply/submit that brief text.