obs-docs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider-authored free text can be ingested when obsdocs.py fetches and text-extracts public documentation pages at runtime (e.g., docs.obsproject.com/*, obsproject.com/wiki/*, and GitHub raw.githubusercontent.com/*) via fetch_url() → extract_text() → cached text, which is then used for search/section output into the agent context.