deepera-deep-evidence-reranking

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill’s runtime workflow ingests the “retrieved passages” (candidate passages from the user’s retrieval system) into the LLM for four-dimension reasoning and then feeds the selected passages to the generator; if those retrieved passages originate from outsider-authored sources (e.g., public web pages, third-party documents, issue/wiki text, or other users’ messages), their body text becomes LLM-readable context via the “Accept the query and candidate passages” → “For each candidate passage, run a four-dimension reasoning evaluation” path.