delegated-review-loop

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow ingests outsider-authored free text from the user’s explicit invocation message/task words when writing task_request.md (Step 1), which is then read by the scout (optional), worker, reviewers, and orchestrator merge logic—so injection text can be submitted through the invocation request itself.