data-processor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). Outsider-authored free text is ingested when the required workflow reads the user-supplied file path and loads its lines via open(path) / line.strip() into the returned records list, which can then be fed into the agent’s LLM context.