content-write

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). Outsider-authored free text can enter the LLM context via Step 1 reading the most recent brief from ~/.kai-marketing/briefs/*.json (the brief’s fields like proof_available, internal_links, cta, etc. are then used in Step 3 to write content), and the workflow does not constrain that brief to be user-authored.