architect

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow reads caller-provided “task/usage” and grounding artifacts during Phase B (via passing references/runner-prompt.md with filled variables for the task and Phase A artifacts), meaning outsider-authored free text can be ingested before selecting a specific item.