openviking-context-database

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required runtime workflow includes assemble/afterTurn/autoRecall that injects “relevant recall” into the latest user message, and that recall is produced by memory_recall/ov_search over OpenViking-stored memories/resources which can include outsider-authored free text (e.g., imported resources or prior user/third-party content) that the LLM then reads and uses as context.