motion-director

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow reads arbitrary web pages to check facts when the user supplies no material (encyclopedias, primary sources, "a page you read"), which is outsider-authored text the agent must actively search for and fetch, so this is low risk.