ecosystem-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow (“ecosystem”/“mixed” mode) explicitly spawns subagents to gather and read external ecosystem sources before synthesizing, so an outsider can poison those sources (e.g., by creating posts/docs/issues on monitored public sites the agent fetches) and have the LLM ingest the injected free text at runtime.