binlee-source-library

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Yes—at runtime the required workflow can run bash scripts/refresh-corpus.sh --apply/--check, which downloads a remote “bundle” from https://drli.beaucare.org (scripts/corpus-source.mjs) and parses embedded article HTML/text into references/articles.json, which is then ingested by scripts/search-corpus.mjs and passed back as free text for the agent’s LLM context.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The refresh flow (scripts/corpus-source.mjs and refresh-corpus.mjs) downloads a remote application bundle from https://drli.beaucare.org (and the manifest references https://drli.beaucare.org/assets/index-Bzx1eKWt.js), whose embedded JSON is parsed at runtime and directly controls the corpus data the agent will use for responses, so I flagged those URLs.