cowork-qbr-builder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow ingests a user-supplied “folder of client artifacts” (e.g., support tickets, meeting notes, email threads) whose free-form text is authored by outsiders, and that text is then used to draft the QBR in the agent’s LLM context.