write-a0

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Runtime path: call? http.get { url: ... } -> resp fetches outsider-authored free text from a remote URL, and parse.json { in: resp.body } ingests that response body into the agent’s LLM context as parsed JSON/string content.