extract-caption-pattern

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Public web content fetched at runtime (“Fetch handle posts” from an external handle/source) is ingested as readable post text and then sent to Gemini for analysis, creating an indirect prompt-injection path from outsider-authored captions.