hermes-wag-summarizer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). Runtime path: scripts/whatsapp-group-summary.py reads outsider-authored WhatsApp message bodies from ~/.hermes/whatsapp/messages.jsonl (populated by the WhatsApp bridge from other participants) and passes them as {messages} into the LLM prompt via templates/default-summary-prompt.txt.