hermes-diagnostic-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md describes a read-only runtime workflow that uses session_search() to ingest the user’s own Hermes session history (including prior assistant/tool outputs) into the model context for analysis, which is outsider-authored free text when it originates from other participants in those sessions (e.g., the user’s messages or third-party content in the history).