night-market-config-catalog

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The only runtime LLM/tiebreak path described is the plugins/herald Stop-hook “second shot” (LLM judge) and the catalog does not indicate any queue/feed/email/chat/inbox or other outsider-authored free-text source is ingested prior to selecting a specific item; policy JSONs are explicitly non-runtime inputs.