stream

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required AI-integration verification step in ai-backend-contract.md runs getstream api QueryChannels and reads the .text of recent messages in channels that end users can post into, so outsider-authored chat text reaches the agent without it selecting a specific message.