dossier-collect

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). For url/concept seeds the workflow’s “Pick sources” + “Round 0 fan-out” step can include WebFetch/web search results, and the subsequent “Extract entities” step ingests the fetched page text (outsider-authored public web content) into the agent’s LLM context.