aicr-analyzing-snapshots

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow ingests the user-provided “AICR snapshot YAML file” contents (FILE_CONTENT/YAML parsing) into the agent’s LLM context via the snapshot’s readable YAML text, and such user-supplied snapshots are outsider-authored data from parties the operating user did not author.