wk-team-hud

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Step 3 ingests live Slack channel messages, Jira issue text, GitHub PR/review/comment text, and email contents for team members, so an outsider who can post into those monitored channels/feeds (e.g., Slack) can inject free text that the agent will read and distill.