flow-nexus-swarm

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow exposes a queue/message ingestion path via mcp__flow-nexus__workflow_queue_status({ include_messages: true }), meaning outsider-authored queue feed items could be read by the agent without selecting a specific trusted item first.