crypto-ctf

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required runtime workflow reads local challenge artifacts and reference files, but the conditional "Targeted hint research" step loads a search for external clues, and arbitrary web search results are outsider-authored content the agent must actively fetch, so exposure is low.