alan-plan

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required Analyze step reads "the task description and any linked context," which can include arbitrary user-supplied URLs whose content an outsider may have authored, so exposure requires the agent to fetch them rather than being forced by a monitored feed.