monte-carlo-monitoring-advisor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Outsider-authored free text is only ingested as part of the user’s own request that drives tool calls (e.g., table/agent selection for search, get_agent_conversation, get_agent_trace), and the runtime workflow otherwise uses trusted first-party reference files via the Read tool.