migrate

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The migration workflow interactively prompts the user for arbitrary local or remote source paths to copy existing data from, allowing an outsider who can control or influence those source directories (or input strings) to inject arbitrary content into the agent's context store.