pdr-intake

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In PDR Intake, the runtime ingests user-provided idea text directly from the conversation to extract intent/problem/objective/scope (steps 2, 4-6) and then persists it into a first-party markdown file, so outsider-authored free text is consumed without selecting a specific item first.