engineering-principles

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required Source-Driven workflow has the agent select and fetch framework documentation pages from arbitrary or varied web hosts (including non-vendor references such as MDN, web.dev, and caniuse), so outsider-authored text can reach the model when the agent chooses to fetch a page, not because it is forced into a monitored feed.