multi-agent-chat

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The agent reads a shared local chat log file (/tmp/agent-chat-<slug>.txt) where separate agent sessions and operators append messages, which constitutes an indirect prompt injection risk via outsider-authored text in a monitored file feed.