startup-analyst

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow for “Fundraising” explicitly says it can “use web search for current market data” and “web search for current market data and reports,” which can cause the agent to ingest outsider-authored free text from search results and fetched pages as part of competitive/research sourcing.