consent-pref-center

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Workflow 3 (TCF v2.2 Consent Signal Integration) requires the CMP to load the Global Vendor List (GVL) from vendorlist.consensu.org at runtime; that fetched public web content is free-form text/metadata that can be ingested into the LLM context via the consent UI/processing pipeline.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The workflow explicitly states the CMP "loads Global Vendor List (GVL) from vendorlist.consensu.org" at runtime and uses that fetched GVL to populate per-vendor and per-purpose UI options (directly controlling the prompts shown to users), so https://vendorlist.consensu.org is a runtime external dependency that controls the agent's prompts.