wayfinder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). wayfinder-close.sh reads ticket frontmatter/body text from user-created markdown files under ${root}/.omo/wayfinder//tickets/*.md (parsed via path.read_text and then embedded into the generated Phase 0 plan.md), so outsider-authored free text can be ingested into the runtime workflow via those ticket files without selecting a specific item.