source-evidence-dataset-development

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow retrieves and processes user-provided or discovered web pages, URLs, reports, and scientific literature (such as via tiangong-kb-sci-search), which are fetched at runtime via search or active selection rather than monitored via an unsolicited input queue.