kol-discovery

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Yes—runtime data from the outsider source “public LinkedIn posts” is fetched via the Apify actor harvestapi/linkedin-post-search and ingested into the script as readable post text (item.get("content"/"text")), which is then carried into CSV fields like Top Post Preview (free-form text from non-user authors).