office-hours

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). Phase 2.75 "Landscape Awareness" explicitly instructs the agent to search public web results (sending generalized category terms to a search provider) and read the top 2–3 third‑party pages to synthesize findings into the design doc, meaning untrusted web content is fetched and used to influence recommendations.