brainstorming

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Outsider free text can be injected via the Visual Companion’s WebSocket events: the server accepts arbitrary JSON from any authorized client at scripts/server.cjs (handleMessage/handleUpgrade), logs it and appends event objects containing choice to STATE_DIR/events, which the brainstorming workflow then reads on the next turn.