authoring-scouts

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The scout runtime (Temporal coordinator → sandboxed scout run) ingests project data via MCP tools like execute-sql/scout-project-profile-get, which can include outsider-authored free text when the project has ingested open-text sources (e.g., support inboxes/social posts) into the data warehouse that the scout queries.