competitor-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). At runtime the workflow fetches and ingests outsider-authored free text from public web pages via orth run brand-dev (Brand.dev retrieval), orth run exa (search/findSimilar with contents.text=true), and orth run scrapegraph (scraping competitor pricing pages), which can include prompt-injection content.