searchable-events

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SQLite and filesystem store indexers call indexableContent() for events that are SearchableEvent when inserting/rehydrating from the event store, and those indexableContent() strings are derived from user-authored event fields (i.e., outsider-submitted Nostr event text becomes indexed).