wk-concise

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Within the required workflow, the hooks/concise-reminder.sh UserPromptSubmit hook runs on every user prompt and injects a reminder string into agent context, so outsider-authored free text (the user’s prompt) is ingested and used as part of the same per-turn LLM input.