osint

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). High: the required runtime workflow fetches public web pages/URLs (e.g., via web search + URL fetching) and then ingests their readable text into the agent for summarization/dossier generation, which can include outsider-authored free text (prompt-injection payloads) from those pages.