review-response

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The required workflow ingests outsider-authored free text via the user-provided “Review text: The full text of the review to respond to” (i.e., content written by the reviewer on third-party platforms), which the agent then uses to generate the LLM response context.