baoyu-translate

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider free text can be ingested when the operating user provides a URL or inline text as the source material: references/workflow-mechanics.md says URL content is fetched at runtime and saved to translate/{slug}.md, and then Step 2 materializes that content and later Step 3.1/Step 4 reads it into 01-analysis.md/02-prompt.md/drafts for LLM translation.