ppda-uganda

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow ingests the solicitation package “instructions, forms, and evaluation criteria” (outsider-authored free text) at runtime via “Buyer solicitation, ToR, or approved brief,” so if that solicitation text contains malicious instructions it can reach the agent’s LLM context (indirect prompt injection risk).