LocalIntelligence

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). ClaudeFill.ts spawns a claude --print subprocess with WebSearch,WebFetch enabled and asks it (via a runtime prompt built from Tools/ClaudeFill.ts) to research empty sections, thereby ingesting outsider-authored web-search results/free text at runtime when --fill is used.