coze-web-fetch

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow reads and extracts free-form text from any outsider-provided URL via client.fetch(url) (configured through the --url/-u arguments), so an outsider can host poison content and have it ingested for extraction at runtime.