qiaomu-app-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider-authored free text from public App Store customer reviews is fetched at runtime via fetchReviews() calling https://itunes.apple.com/${country}/rss/customerreviews/.../json, then written into evidence.md/agent-prompt.md and used by the agent to generate the final LLM report (indirect prompt injection risk).