aif-transfer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Required workflow ingests outsider-authored free text by reading Markdown patch files from a user-supplied “reference project” under its .ai-factory/ patch directory (direct *.md children), then extracts prevention points from that content for relevance gating and uses it to drive the delegated /aif-evolve workflow.