arise-wiki

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The workflow’s Ingest operation explicitly says that if a source is a URL or file, the agent will fetch/read it fully and then write summaries into the wiki—meaning outsider-authored free text from arbitrary URLs/files can be ingested into the LLM’s context during processing.