handsfree

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow monitors microphone audio via whisper-stream in appendix-stop.sh, which transcribes spoken speech in real time from the environment, allowing anyone speaking near the microphone to inject arbitrary text into the voice loop.