analyzing-lnk-file-and-jump-list-artifacts

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow ingests and parses LNK/Jump List artifact files from a user-supplied evidence directory (outsider-authored file contents), and those parsed fields (e.g., target paths/arguments/description) become readable text/JSON that would be fed into the agent’s LLM context for reporting.