habits-and-goals

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the Annual Planning / Goal Decomposition / Monthly Check-in workflows, the agent actively ingests first-party outsider-authored free text from the user via the AskUserQuestion tool (e.g., Big Goal, milestones, daily systems, Anti-Goals, and monthly reflections), so the workflow routinely consumes untrusted text entered by others.