fusion

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). At runtime, the orchestrator runs outsider-provided web-browsing/research via panelists (e.g., run_codex.sh enables tools.web_search=true and writes the panelist’s final prose to an output file, which is then read by the Opus 4.8 judge), so any fetched public web page content that the panelist incorporates can flow into the judge’s LLM context as free text.