fuller

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required workflow includes “Investigate globally” by using “material (code, docs, prior notes, sources)” and “research for supporting and conflicting evidence,” which at runtime commonly entails fetching/reading outsider-authored web pages or other third-party documents into the LLM context.