ppa-pack-size-leverage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Runtime workflow includes a [web_search] step that fetches public web content (e.g., “shrinkflation consumer reaction …” and “pack size strategy …”), whose scraped page text can be ingested into the agent’s LLM context as free-form text.