pipa-daily-plan

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow explicitly reads outsider-authored free text from the user’s external project tracker and calendar sources at runtime (“Verify live access before reading a source. Use ~~project tracker and ~~calendar as core sources”), where those systems contain user/community-authored ticket/event text.