relay

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Relay’s required runtime workflow ingests outsider-authored free text indirectly via the relay packet files (charter.md, status.md, and optionally targeted log.md entries) stored under a user-chosen root (e.g., .pi-web/relays/<name>/), and those files can contain arbitrary free text authored by the provider user/outsider that each leg runner reads at start.