the-forge

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill ingests “discussion signal” from a content-radar briefing file (public Reddit/X-derived text) via extract_discussion_signal() in forge.py, which is then embedded into the Gemini prompt in build_prompt(), creating an indirect prompt-injection exposure path from outsider-authored free-form posts/comments.