blueprint

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The outsider-authored free text exposure occurs because, in project mode, a user-run flow selection leads fan-out where each “scenario-prompt.md” agent reads and emits repo text (via source_paths) that is then rendered into HTML attributes including detail fields and message labels/captions.