pp-nynj-world-cup-concierge

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow runs the nynj-world-cup-concierge-pp-cli extract command, which “fetch[es] public NYNJ World Cup Concierge sources” at runtime and returns normalized JSON candidates—this implies the CLI ingests outsider-authored free text from public web sources into the agent context.