adviser

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/route_adviser.py, the workflow reads the parent session rollout JSONL from sessions/**/rollout-*-<thread_id>.jsonl and forwards the derived turn context (model/effort) and inspected facts/tool results as the <review_packet> via stdin to scripts/run_adviser.py, so any outsider-authored free text included in the stored rollout/session context would be ingested by the spawned adviser.