oneshot-build

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow for agent.build includes source_url: 'https://competitor.com' which is fetched/analyzed for content/inspiration (public web content), and that fetched free-form page text can be ingested into the agent’s LLM context.