china-break-trace

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider free text can enter the LLM via the “Secondary Sources” runtime ingestion of 巨潮 filings/notes, 审计报告, 公告, and 证监会/交易所 inquiry/penalty documents, which are third-party-authored text fetched/parsed at runtime and then provided to the agent for analysis.