memory

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's sync-ssot-from-memory workflow explicitly says that if the memory system is inaccessible it will ask the user to "Please paste the information you want to promote" (references/sync-ssot-from-memory.md), meaning it ingests arbitrary user-provided/untrusted content which the agent will read and use to generate SSOT entries that can change decisions and actions.