gtm-tracking-plan

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow includes a runtime WebFetch of a user-supplied site URL in Step 1 (“WebFetch the site, infer the site type and funnel”), and the fetched page text is then used to derive the event list—this is public web content fetched at runtime that can contain outsider-authored free text and thus can be ingested into the agent’s LLM context.