reader

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). Step 3 (“Run Parallel Persona Analysis”) has each persona Task agent read the runtime markdown at FILE_PATH and ingest its full document text into the LLM context for evaluation, which is outsider-authored if the operating user did not author the document.