soia-pkm-query-vault

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Runtime reads user-provided vault free text from a local filesystem path passed via --vault, then searches user-controlled --query across filenames and UTF-8 file bodies (scripts/query_vault.py calls iter_files() and read_text() and emits matching snippets/content), so outsider-authored content present in the vault can be ingested without selecting a specific item.