prime-the-agent

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md, Step 0 (“Recall the site's stored memory”) loads per-site free-text from the WordPress option respira_site_memory via respira_get_option, meaning outsider-authored content stored on the site can be ingested at runtime before item selection.