antithesis-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow prompts the user for external references including issue trackers, design notes, or docs, and instructs agents to read and analyze them, but does not actively ingest or monitor outsider-authored free text streams without prior selection.