x-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Runtime ingests outsider-authored free text only via explicit parameterized reads from X public profile pages/posts/post detail through Crawlora endpoints (/x/profile/{username}, /x/profile/{username}/posts, /x/post/{id}), meaning a user can supply an arbitrary handle/id to fetch that text.