harvard-artifacts-etl-streamlit-app

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow fetches artifact records and metadata from the Harvard Art Museums API, which contains museum object titles, descriptions, and text fields accessible to the agent.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The repository clone command references a personal third-party GitHub repository rather than an official publisher or verified release channel, constituting an unverifiable runtime dependency.