timing-action-matrix

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow is a step-by-step “coach mode” that elicits the user’s case (e.g., “ask them to state the action…”) and therefore ingests outsider-authored free text via the conversation input, without requiring selecting a specific pre-authored item first.