gifgrep

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow is to search/browse/download GIFs from external providers (Tenor/Giphy) at runtime, and the resulting provider text/metadata (e.g., titles/URLs) would be ingested into the agent/LLM context via the tool’s output/preview pipeline, which is outsider-authored free text from public web content.