qoder-delegate

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow (node "<skill-dir>/scripts/relay.mjs" --brief ...) ingests outsider-authored free text via the --brief <file>/stdin brief argument and passes it to qodercli, so prompt-injection text can be supplied by the user at dispatch time.