start-workflow

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow runs a local web server (workflow.py) that monitors and consumes user-submitted requests, answers, and feedback via a web workspace, allowing anyone with access to the local browser interface to submit free text that the agent reads and processes.