sred-project-organizer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Step 1-2 and 4-6 ingest and read outsider-authored free text by asking the user for a Notion “Work Summary” link, then using the linked Notion PR/document content to classify projects and extract uncertainties/experiments (including reviewing “Notion documents, Github PRs and Linear tickets” that originate from users outside the agent).