maestro-tools-register

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The workflow’s runtime path for outsider text is Extract mode, where it “Pull[s] reusable processes from conversations/code/docs” (i.e., user-provided conversation/code/docs authored by others) and then writes that extracted prose into .workflow/knowhow/ for LLM use; this is an indirect prompt-injection risk from outsider-authored free text.