wiki-ingest

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow reads the target space pages and, critically, “Read the source end to end” via wiki_read_source from a raw/ path mentioned in an outsider-authored operation issue, so free text from that source document can be ingested into the LLM context.