gtm-account-scoring

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow reads first-party GTM context files (target node icps/*.md under ~/.gtm/<org-slug>/...) and never “enriches” by opening external links, but it directly ingests the user-supplied Label as an input while validating it against those visible ICP labels.