hz-api-upgrade

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow uses metavr docs search to search documentation, which feeds search results into the agent; since web search and documentation search return untrusted or arbitrary content under low risk, this is classified as low.