pilot-chat

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow only sends/receives messages via pilotctl --json inbox/send-message between named agents over the Pilot Protocol network, so any free text an outsider submits through those message endpoints could be read by the agent at runtime without first selecting specific trusted content.