tanstack-ai-memory-honcho

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md describes recall calling the user peer’s dialectic chat() and injecting the synthesized answer as the system prompt, so outsider-authored user messages entering the session via the user peer are free text ingested at runtime.