build-agent-broker-project

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Runtime text ingestion can include outsider-authored free text from A2A inputs (e.g., @request.payload.message.parts[0].text in the broker’s generator/reasoning prompts), because an external caller can send arbitrary message content.