decision-auditor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required workflow Bias Check / Premortem / Reframe, the agent first uses AskUserQuestion to ingest the user’s decision/plan text (“What decision or judgment needs checking?”, “What’s the plan?”, “How is the decision currently presented?”) and then operates directly on that free-form, outsider-authored content.