evm-audit-master

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required runtime workflow ingests the contract source files under audit (“Fetch all contract files (raw GitHub URL or local path)” and “Each agent receives: The full contract source”); if those files come from public web content / outsider-authored repo issues/PRs or arbitrary URLs provided by the operating user, that source is outsider-authored free text that can be fed into the LLM context via the contract text.