web-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The workflow delegates to research subagents that use the web_search tool and then save findings containing “source URLs” and “relevant quotes” into local research_[topic_name]/findings_[subtopic].md, which are later read via read_file and thus feed outsider-authored web page text into the agent’s LLM context during synthesis.