skillopt

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). scripts/seed-board.sh loads user-supplied task instructions from optional JSON files into the kanban board, and scripts/run-phase.sh (rollout/reflect/propose/validate/slow-meta when --exec) ingests those task instructions as part of LLM prompts via Hermes -z, so outsiders can poison via task queue/board entries that the workflow reads.