cowork-folder-organizer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The workflow’s “Inventory” step reads file headers/first lines and “one-line content summary” from the target directory (outsider-authored content if the directory contains files not authored by the operating user), which becomes free-text in the agent’s LLM context for classification/proposal.