aeo

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/aeo_audit.py, the load() function fetches and parses an outsider-controlled HTTP(S) URL’s HTML (including visible text and embedded JSON-LD) when the runtime workflow is invoked with a source argument, so attacker-posted free text at that URL can be ingested.