supervisor-review-queue

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The runtime workflow reads queue entries from references/review-queue.yaml (which includes content_path pointing to student-submitted document text), so the LLM context can ingest outsider-authored free-form prose from students via that document content.