100-domain-knowledge

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow uses web search and external research to gather domain knowledge, which involves fetching arbitrary web pages and search results where an attacker can publish poison but cannot force direct delivery (low risk).