homework-notebook-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow reads AGENTS.md, “relevant Serena memories or docs/memory-bank/ fallback context, and the assignment notebook instructions” (outsider-authored notebook content is explicitly in-scope via Assignments/*.ipynb), so the LLM can ingest free-form text authored by others from the notebook and/or memory/doc files at runtime.