karpathy-kb

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text is ingested via the runtime scraping/crawling step (e.g., firecrawl scrape/crawl <url> in Procedure 2), whose scraped markdown is saved under <topic>/raw/articles/*.md and then fully loaded into the LLM context during compile (“Load the candidate raw sources fully into context”).