register-book-analytics

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow has the user navigate to Google Analytics and then read the Measurement ID from the “Set up a Google tag” snippet (runtime browser-extracted free text from an outsider-authored web page: analytics.google.com), which is then copied into the agent’s context.