keep-on-going

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads bean bodies and metadata generated via the beans CLI (local storage), which may contain untrusted text if tasks/subtasks originate from external sources or subagents, presenting an indirect prompt injection vector.