pact-handoff-harvest

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). Standard Harvest Step 1/3 reads outsider-authored HANDOFF body text from the session journal (session-journal.jsonl → read_events('agent_handoff') → inline handoff JSON) and/or TaskGet(...).metadata.handoff, where HANDOFFs are written by other agents/parties the user did not author.