agent-delegate

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow is references/scripts/agent-delegate.sh and it ingests the outsider-controlled free text only from a user-supplied --prompt-file (for both delegate and review) by piping that file’s contents to the peer CLI over stdin ("${CLI_CMD[@]}" < "$prompt_used"), i.e., before any selection of a specific trusted item.