pi-goal

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime path pi.on("session_start") / pi.on("agent_end") in src/index.ts queues hidden continuation prompts containing the user-authored /goal <objective> string via buildContinuationPrompt(goal) → queueHiddenGoalPrompt(...), meaning outsider-provided free text is ingested by the agent.