browse

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider-authored free text is ingested when the workflow uses mcp__claude-in-chrome__read_page to extract the Twitter home timeline (posts/comments authored by other users) and then feeds that extracted post content into the agent for filtering/summarization.