product-design-harness

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow loads only bundled local files, but its evidence-retrieval contract (ORCHESTRATION.md) sends requests to external search and connectors for named claims, and the agent then ingests the returned outsider-authored text (public posts, community reviews) without first selecting a specific item, so the exposure is that low-tier active-search path.