deep-work

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime the scripts scripts/calendar_fragmentation.py and scripts/session_log_analyzer.py ingest full outsider-authored free-text fields (e.g., calendar event title/session artefact strings) from a user-provided JSON file via --input, and then include those strings in the generated text/JSON reports (e.g., propose_move sets "move": event.get("title", ...)).