pilot-dropbox

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The runtime workflow subscribes to a Pilot Protocol topic (pilotctl --json subscribe "$PEER" "$TOPIC") and then parses each incoming event’s JSON fields (.type, .from, .filename, .hash) from that outsider-authored pub/sub stream, which can contain attacker-controlled free text that is ingested into the agent’s LLM context via subsequent message/file actions.