magi

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In references/scripts/magi-run.sh → run_sage() → dispatch_round(), the host-supplied prompt/user question is written to ${out_dir}/question.md and then piped/loaded from ${out_dir}/<round>/prompt*.md into each sage CLI via stdin or {PROMPT_FILE}, meaning outsider-authored free text can be ingested by the runtime workflow immediately.