candid-friend

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required step 0 of the worth-doing workflow has the agent search related tickets (相关的工单) at requirement intake, so it reads ticket text that outsiders could file if the tracker accepts external submissions, without first selecting a specific item.