plan-iterate

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Source text is outsider-authored free text only when a user/operator supplies it via --context to record-context / --review to record-review, which then gets packaged and potentially ingested by the external reviewer loop (e.g., $scillm reviewing the stored review bundle/artifacts).