directory-link-evaluation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow ingests candidate directory URLs and then performs browser inspection/search/index checks on those pages at runtime, which can pull outsider-authored free text (the directory’s own content) into the agent’s LLM context.