imagine

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). Outsider free text is the user-supplied --prompt (and edit.js’s --prompt) which is inserted into the LLM request body as input_text / input: [{ role: "user", content: ... }] and thus becomes LLM context at runtime.