okf

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required runtime workflow runs scripts/validate_okf.py which reads markdown files from the user-supplied <bundle_dir> on disk (including outsider-authored .md content) and places their readable text into the script’s in-memory context for regex scanning of cross-links; this can include free-form outsider text.