seo-content-brief

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The required runtime workflow uses belt app run tavily/search-assistant and belt app run tavily/extract to fetch/analyze top-ranking web pages from user-supplied queries/URLs, so outsider-authored free text from public web content is ingested into the agent’s LLM context.