isitagentready

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow fetches the user-supplied production URL's live content (robots.txt, llms.txt, homepage headers and Markdown responses, and browser-rendered pages) and reads it, so an outsider who controls or can post to that site can place text the agent ingests, but only after the agent selects and fetches the URL.