writer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow extracts and reads public blog posts and social media posts via browser scraping scripts (extract-blog-samples.js, extract-social-samples.js) from selected URLs and profile URLs, which constitutes ingestion of outsider-authored content via an active search/fetch path.