asb-carol-observations

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow ingests “External research” scraped from public reviews/social posts/forums/press (and may also accept pasted links/reviews) into the agent’s prompts before the user confirms it, so outsider-authored free text can be delivered via the web research step.