opencode-handoff-p2p

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Required receive workflow pulls a user-controlled GitHub inbox repo, extracts outsider-authored file content (share URL) after verifier approval, then fetches the referenced URL content via WebFetch—so free text from third-party collaborators can be ingested at runtime without pre-selecting a specific item beyond “check inbox”.