replay

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow uses entire search / entire explain to fetch and read checkpoint transcripts authored by other people (outsider sources) into the agent’s LLM context via entire explain --checkpoint <step-id> --full/--raw-transcript.