github-explorer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Yes: Phase 2/Phase 3 instructs runtime ingestion of outsider-authored free text from public GitHub Issues, repo pages, and other web pages (via web_fetch/browser/content-extract/search-layer), which would be read as prose by the agent’s LLM as fetched content for “分析研判”.