recall

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime the skill ingests outsider-authored free text from the user’s query argument to python3 scripts/recall.py search "<what the user said>", then uses that text to retrieve and print matching transcript content (local or via remote recall_search).