knowledge-query

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The runtime path for reading outsider-authored free text is Step 1–2: it ranks pages in a bound wiki and then ingests their body text via the Read tool, where those wiki pages are authored by parties other than the operating user (outsider content from the knowledge base).