org-attack-surface

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow queries external public registries (GLEIF, SEC EDGAR, OpenCorporates, Wikidata, crt.sh, ARIN, RIPE, BGPView) and ingests outsider-submitted corporate filings, public certificates, and registry records without the agent first selecting a specific item.