bfs-synthesize-documents

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow explicitly ingests “provided documents” (including pasted text and URLs) and may perform external search, so outsider-authored free text from those runtime-provided sources can be read and incorporated into the LLM context during synthesis.