programmatic-and-brand-safety

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow requires reading publisher files such as ads.txt and app-ads.txt over the web (e.g. references/buying-routes-and-supply-path.md, line 44: "check each domain's /ads.txt directly"), which allows third-party publishers to inject untrusted text into the agent's ingestion path.