morph-warpgrep

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly reads and returns file contents from repositories via morph.warpGrep.execute (and the test script even clones a public GitHub repo: https://github.com/letta-ai/letta-code.git), so the agent will ingest and interpret arbitrary third‑party/user‑generated code and comments as part of its workflow.