follow-builders-lite

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The runtime path fetches public JSON feed artifacts from https://raw.githubusercontent.com/zarazhangrui/follow-builders/main/feed-*.json and then includes their free-text fields (e.g., tweet text, podcast transcript, blog content/description) directly into the JSON output that the agent reads into the LLM context—this is outsider-authored content from a third-party repository.