source-driven-development

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow explicitly instructs the agent to “fetch the official source” (e.g., official docs/GitHub/release notes) and then use/extract patterns from that fetched text, which is runtime-fetched outsider-authored free text that can include prompt-injection content.