session-debrief

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow runs ${POLYGRAPH_CLI:-polygraph} session logs ... > "$TMPDIR/<sessionId>-logs.txt" and then reads that rendered transcript text into the agent’s LLM context; those logs are authored by other participants in the inspected Polygraph sessions (outsider-authored free text), creating an indirect prompt-injection risk.