autogen-tool-orchestration

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow registers and executes a Researcher retrieval tool whose purpose is to “retrieve source material … from the architecture-defined retrieval surface,” which (by definition) can include public web content or other outsider-authored documents that are ingested as readable text into the LLM context for grounding/citation.