google-play-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow retrieves Google Play app reviews and listing descriptions authored by third-party app developers and users via search or inspection tools, falling under low indirect prompt injection risk as the agent must actively select and fetch specific apps.