research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow includes “Search and triage” and “Verify” steps that necessarily fetch and read external sources (e.g., public web pages/articles or other third-party documents) as readable text for citation/verification, which can contain outsider-authored free text and thus indirect prompt-injection risk.