flux-opencode-prime

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Flow Prime’s required runtime workflow executes “scouts” via Task (Phase 1) that analyze outsider-provided repository content from files like README.md/CLAUDE.md/AGENTS.md and configuration files in the target repo root, meaning the agent ingests free text authored by the repo owner/user at runtime without selecting a specific pre-known item.