orchard

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Source: local Orchard CLI invoked by the required workflow (scripts/resolve-orchard.sh resolves and then the skill runs commands like mail read, calendar info, reminder info, messages read), which ingests outsider-authored free text that already exists inside the user’s Apple app data (emails/messages/notes/calendar text).