ic-operator-admin

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow calls the MCP tool ic_admin_list_pending_tier_requests, whose runtime response includes outsider-authored free-text fields like note (e.g., “I host VCN, attended every Lab night”) from pending membership requests, and that prose is fed into the agent’s LLM context for decision-making.