web-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow directs the agent to perform runtime web/content retrieval (e.g., “Search from two to four meaningfully different angles” and “Read the actual official docs… PDFs… repository examples”), which can ingest outsider-authored free text from public web pages or repositories fetched at runtime.