coffee-and-espresso-expert

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow is to perform “targeted web searches” and “record each source with title, URL, and access date,” which implies fetching public web pages/articles at runtime and ingesting their free-form text into the agent’s LLM context (public web content category).

MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

• Hidden Unicode characters detected (1 type(s) found)