office-hours-track-aware

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). At runtime the workflow reads design.md (the $RECENT_MD file) produced by the upstream office-hours and then scans its free-text content to infer track, meaning the read text is sourced from the LLM’s office-hours output rather than trusted first-party provider metadata.