pinecone:full-text-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime ingestion workflow reads user-provided JSONL text from scripts/ingest.py (via load_jsonl()), then uses that free text both in bulk upserts (idx.documents.batch_upsert) and in a sentinel documents.search query (query=sentinel_token) without first selecting a trusted item.