notebook-openrouter

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). Outsider free text can enter the LLM context at runtime via the included OpenRouter notebooks’ requests.post(...) calls to OpenRouter using user-provided messages (e.g., chat prompts), which are not authored by the operating user and are sent as readable text to the model.