recall

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Recall’s required runtime workflow reads “authorized working history” via host-exposed conversation-history/session-search and then sweeps the “shared record” by running why over repository/ticket sources, which can include outsider-authored free text like issue/PR/ticket comments when they are part of the scoped authorized sources the host exposes.