social-presence

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.78). Mode 1/2/3 uses “WebSearch” and “gh search …” to fetch public web pages and GitHub content at runtime; those outsider-authored texts (e.g., scraped articles, PR/release/commit messages from other authors) can be ingested into the agent’s LLM context for summarization/ranking.