browse-records

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow reads the user's local working-records store, where evidence may preserve quotations from external issues or PRs, but it selects specific items and performs no remote fetch, so outsider text is reachable only after the agent chooses to inspect a record.