intent-to-workflow

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The hook reads JSON or plain text payloads from stdin via sys.stdin.read() in src/intent_to_workflow/hook.py, which processes outsider-authored prompt inputs for the agent.