orca-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider free text can enter the LLM context via the browser automation path: orca goto --url / orca snapshot / orca exec can ingest page-provided text (public web content or arbitrary URLs) into the agent-visible snapshot/DOM text that the agent then uses in subsequent LLM reasoning.