parallel-efficiency

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required search, extract, and research workflows (Search, Search MCP, Extract, Task, and Responses) ingest arbitrary web pages that an outsider can publish, but the agent must actively query or fetch them, so the attacker can poison content without being able to force delivery.