senpi-improve-trades

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/review.py, the telemetry step shells out to openclaw senpi events --runtime <id> --json for each CURRENT (ACTIVE/PAUSED) strategy runtime and ingests the returned entries (including signal.outcome fields like senpi.outcome.reason_code/result and any free-text-like event bodies/attrs), which can be influenced by outsider-authored runtime state/events.