careful

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime path bin/check-careful.sh reads JSON tool input from stdin and parses the user/outsider-provided "command" field (INPUT=$(cat) and CMD=...), making the agent’s required workflow dependent on outsider free text (the command string) before deciding whether to warn.