interactive-debugging

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow reads runtime logs from .debug/debug.log, and that log is populated at runtime by the debug server appending the raw HTTP request body from POST /debug (outsider-authored free text could be sent by any external caller), which then becomes LLM-readable when the agent inspects the log.