obs-memory

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill’s runtime context can include outsider-authored free text from the user’s current git repo via analyze: it “Read each discovered file” (e.g., README.md, docs/*, docs/adr/*, etc.) and then synthesizes that content into vault notes and the agent’s working context, so any repo files authored by others can be ingested as prose.