expanso-fan-out-pattern

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The runtime pipeline ingests arbitrary HTTP request bodies from an outsider (clients posting to /events) into the LLM via the pipeline’s input.http_server and subsequent processor/output flow, creating an indirect prompt-injection risk.