there-there

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.78). The required runtime workflow for triage/search/response calls show-ticket/list-tickets, whose JSON includes outsider-authored ticket message bodies (customer/inbound/outbound/note content) and previews; those message texts are then read/processed by the agent, creating an indirect prompt-injection path via ticket content.