youtube-digest

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In context/companion-primary-sources.md → Phase 0b, the workflow reads source/companion-sources.md (authored from operator-supplied companion URL(s)) and then WebFetches each companion URL “full page”, so outsider-authored page text is ingested without requiring the agent to pre-select a specific trusted item.