okf-enrich

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required runtime workflow, the agent reads and ingests outsider-authored free text from the OKF bundle itself—specifically each concept markdown file’s YAML frontmatter (including the user-provided description field) and related sections like # Columns, ## Data Profile/## Sample, and optional # Relationships—as directed by okf-reader-style “read the index first” and then read only the needed concept files.