boxlang-core-dev-bif-development

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The "Accessing BoxRuntime Services From a BIF" section includes a CachedFetch example that accepts an arbitrary url argument and calls fetchFromUrl(url) to retrieve and return remote data, which clearly ingests untrusted third‑party content into the agent's workflow.