climate-science-explainer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow is to perform “targeted web searches” and “record each source with title, URL, and access date,” which implies fetching public web pages and ingesting their readable text into the agent’s LLM context (outsider-authored free text from arbitrary URLs).

MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

• Hidden Unicode characters detected (1 type(s) found)