teleport-investigate

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). Yes: the required workflow runs tctl investigate ... --format json, whose data events (including outsider-controlled fields like usernames/resource names/user-agent/event payloads) become readable JSON in the agent context for summarization, which is adversarial free text.