flow-sync-status

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required runtime workflow for this skill is to “Pull Beads state and notes as the source of truth” and then “Regenerate synchronized markdown views,” which implies ingesting Beads notes/content into the agent context; since Beads notes are not authored by the operating user (outsider-authored free text), this creates an indirect prompt-injection risk via Beads-provided prose.