agent-team

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow reads outsider-authored free text from the target repo at runtime (e.g., .claude/agents/ files and .claude/agent-team.md plus repository files discovered and parsed during probing and role/tail construction), which can include attacker-injected prompt text in repo contents without selecting a specific item first.