forge

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). Yes: in references/specify.md the specify phase may use WebSearch/WebFetch and then reads and summarizes fetched pages as “External References,” which is outsider-authored free text that can be incorporated into the agent’s LLM context during runtime.