hermes-self-evaluation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Hermes Self-Evaluation reads outsider-authored free text from the local session database (~/.hermes/state.db / ~/.hermes/profiles/<name>/state.db) via messages.content (user messages and assistant non-tool text) when composing prompts and/or diagnosing a runaway session.