research-audience-people-and-contacts

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow instructs the agent to read web pages, public profiles, and search results to find people and contact information, exposing it to arbitrary outsider-authored content via web search and browsing.