widget-forms

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime path is ask_followup_questions, which serializes the agent’s form and then ingests the user’s submitted free-text structured answer from the next chat message; this is outsider-authored content originating from the user.