material-contract-schedule

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The workflow's Step 1 explicitly instructs retrieving applicable antitrust/foreign-investment rules via "[yuandian检索]" ("检索适用的反垄断法、外商投资安全审查等规则并引用控制性规定"), which requires fetching and reading public third‑party legal materials that the agent must interpret and that can materially affect its decisions—therefore it ingests untrusted external content as part of its required flow.