hunt-agent-rag

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow in the runnable probe ingests and retrieves data via a target knowledge base and query endpoint (https://target/kb/ingest and https://target/agent/chat), which can be influenced by an attacker planting documents into the vector store.