fsi-er-earnings-preview

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Step 1 explicitly says to “pull consensus estimates via web search” and “review the company’s prior quarter earnings call,” which at runtime would ingest outsider-authored web page text and/or transcript/commentary from non-user sources into the agent’s LLM context.