oma-docs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). In sync mode, the runtime path is: oma docs sync → CLI emits a candidate-doc list → the host LLM reads the outsider-authored free text of each candidate doc by loading docs/<doc> content (and also uses git diff text), which is not authored by the operating user/agent; this doc body text is then placed into the LLM context for patch drafting.