review-readme

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In review_readme.py, the runtime reads README.md text from the user-supplied readme_path (e.g., text = readme_path.read_text(...) and readme_text = readme_path.read_text(...)) and inlines it into the $ask webkimi bundle via build_bundle, so outsider-authored README free text is ingested without selecting a specific trusted item.