automated-rubrics-reliable-evaluation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The workflow’s runtime retrieval step (Step 2: “Fetch the top-5 results… Extract text with a tool like Trafilatura”) ingests outsider-authored web/registry medical pages into the LLM context as readable evidence blocks, enabling indirect prompt injection via that retrieved free text.