cc-second-brain

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow “consolidator” reads engram content via MCP tools mem_search and mem_get_observation (SEARCHing cc/* observations and fetching full matched content), and those observations originate from user/outsider-authored free text saved earlier into engram.