idea-forge

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). In Mode: validate (and Mode: memo), the workflow runs WebSearch and then uses the resulting fetched/retrieved web page text as untrusted input for scoring and memo generation, so outsider-authored free text from public sources can be ingested at runtime.