aiox-dev

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required activation and story workflow read only internal files (story files, handoff artifacts, git status, and the user's own code), but the optional-yet-listed tools context7 (third-party library docs) and browser (web pages) let the agent actively fetch outsider-authored content during development, which fits the low tier.