incremental-implementation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime, the workflow reads outsider-authored free text from user-controlled OMO task JSON files under $OMO_TASKS_DIR/tasks/<list-id>/<task-id>.json (notably metadata.description and the various metadata.* fields) in scripts/task-brief.sh, and then embeds that text into the executor prompt via the generated brief file.