recap

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Yes—during the collect workflow, scripts/recap.py invokes the Recall exporter (subprocess.run([python3 ... recall/scripts/recall.py session-export ...])) and ingests the returned page["items"][].text (Recall-authored transcript text) into the manifest, which is later consumed by the synthesis/LLM renderer.