agent-orchestration-improve-agent

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The workflow instructs using context-manager to “collect representative examples” and “historical data collection,” which at runtime would likely ingest prior user/conversation text (outsider-authored free-form messages) into the LLM context for analysis.