mols-kanban-markdown

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). Outsider free text can be ingested because the required router workflow loads and executes sub-workflows that run scripts reading arbitrary markdown card files from the target Kanban directory (e.g., scripts/move_cards.py reads card_path.read_text(...) and scripts/validate_frontmatter.py reads each card file), and those file contents can be outsider-authored if the operating user points to an untrusted board.