external-feedback-triage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow has the agent triage user-supplied external feedback (reviews, scanner findings, blog posts, advisories/PoCs, model suggestions), and some items require fetching arbitrary or selected external content, so outsiders can plant text the agent must read but cannot force delivery into a monitored queue.