olares-knowledge

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The runtime workflow ingests only user-supplied identifiers/URLs to create/inspect downloads, and while it may later read back task status rows from the download-server, those rows are derived from first-party server state rather than arbitrary outsider-authored free text pushed into an always-read queue/feed.