ship-feature

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). In the required runtime workflow, outsider-authored free text enters only via the user’s “task” (delegated to spec in phase 1 task mode) and is not shown as being ingested from monitored queues/feeds, emails, tickets, issues, or arbitrary fetched pages.