kf-g-agent-orchestrator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). orchestrator-runtime workflow itself does not directly read outsider-authored free text, but it delegates browser/WebSearch/WebFetch and Read/Grep/Glob/code exploration to workers, which would ingest outsider-submitted text if such text enters those external sources (e.g., queued/posted content that the worker fetches or reads).