outlit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outlit’s required runtime workflow is to call registered outlit_* tools (e.g., outlit_get_source, outlit_get_timeline, outlit_search_customer_context) which can ingest underlying customer artifacts/sources (emails, tickets, conversations) authored by non-operating users, and those source payloads are then fed into the agent’s LLM context.