bkd

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow consumes outsider-submitted text via BKD issue execution prompts, follow-ups, and message replies ($BKD_URL/projects/{projectId}/issues/{issueId}/follow-up and $BKD_URL/messages/items), where BKD monitors and delivers outsider inputs into the agent's runtime execution.