nova-sonic-voice-agent

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow ingests OUTSIDER-authored free text from the client over the WebSocket (websocket.receive_json() in handle_websocket_session → agent.send(text) when type=="text_input"), and that text is not authored by the operating user.