debug-buttercup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). scripts/diagnose.sh runs kubectl commands at runtime that ingest outsider-authored free text into the snapshot—specifically Kubernetes event messages and pod/container log lines (which can include arbitrary text from other actors) that are then printed and would be available to the agent/LLM context.