show-me-your-work

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow reads the run’s audit transcript files from the workspace under agent-transcripts/ to cross-check and perform cross-model review, and those transcripts can include outsider-authored free text (e.g., user messages/chat).