wiki-digest

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). Runtime path: Stage 1 loads wiki entries via maestro search and then Stage 2–3 reads their bodies/titles for clustering and gap detection; if those wiki entries were authored by outsiders, their free text is ingested into the agent’s LLM context (indirect prompt injection risk).