bailian-knowledge

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow uses knowledge retrieval and chat (bl knowledge search / bl knowledge chat) over a knowledge base containing user-uploaded and third-party documents, which can expose the agent to outsider-authored free text at runtime.