dashboard

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In collectors.py, the runtime dashboard flow reads outsider-controllable free text from files and JSON/JSONL logs under the user’s .pi (e.g., ~/.pi/assistant/metrics.jsonl and ~/.pi/task-monitor/* state files, and especially monitor-* /report.json) and then renders/serializes that data in tui.py/renderer.py.