markdown

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider-authored free text is the assistant/user message content rendered by MessagePrimitive.Parts into MarkdownTextPrimitive’s text branch; that text is then parsed as markdown (and can include fenced code for Mermaid/LaTeX) and fed into the LLM context indirectly via the chat system’s message pipeline.