synthesizer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The Synthesizer ingests outsider-authored free text from the runtime-generated variant markdown files (variants/variant-{I}-{bias}.md), which are produced by the separate prometheus-alloy skill and are not authored by the operating user; those variant bodies are read and merged into the LLM context during Steps 1–6.