hunt-rag-vector

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow queries a target app's shared RAG knowledge base, which outsiders can write into via document upload, and the agent reads the retrieved chunks without selecting any specific item, so the source is the user-supplied target app (null URL).