research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text can be ingested when the required runtime workflow uses web/search/scrape tools (e.g., /search → brave-search/firecrawl in quick/full/deep modes), which fetch and read public pages/snippets and then feed their extracted prose into the agent for synthesis.