phoenix-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The agent skill instructs the LLM to inspect traces, spans, and sessions via CLI commands like px trace list and px trace get, which ingest LLM application data containing user inputs, outputs, and retrieved content that may originate from untrusted end-users.