are-open-weight-ready-social

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The workflow ingests user-provided post text into the prompt template at runtime (“Input: Post: {post_text}”), and that post text is outsider-authored free-form content (i.e., the social media user’s text) that the agent then sends to the LLM for classification.