adk-dev-console

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The Components page (Registry tab) clearly fetches manifests from an external component registry (references/component-registry.md and pages.md) and auto-registers custom components — including optional handlers that the LLM can invoke at runtime — meaning third-party component content can be read/interpreted and materially influence agent behavior.