init-sales-workspace

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The workflow reads founder-provided free text interactively (outsider-authored relative to the agent/system) and writes it into .sales/context.md, which is then available for later prompts—so the agent is likely to ingest that user/third-party content as LLM context.