governance

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The /governance runtime path (scripts/governance_loop.py command run) ingests outsider-controlled --task free text and records it into report.json/index.html without any requirement to pre-select trusted items, making the agent’s workflow susceptible to indirect prompt injection via task text.