memory-backup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Restore/backup runtime path uses gh repo view/git clone to fetch an outsider-authored GitHub repository, then copies its knowledge-base/*.md and experience/*.md contents into the local workspace (which are subsequently ingested by the agent/LLM via the knowledge base), creating an indirect prompt-injection channel from third-party text.