tend

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow reads existing .allium files from the project (and may search for them), and those files’ contents are free-form text authored by others, which can be ingested into the agent’s LLM context during “Read the relevant .allium files”.