reducto

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow ingests outsider-authored free text when the user supplies a public document_url (e.g., arxiv.org) or a presigned URL from an uploaded file, and the service returns the parsed document text into the agent’s LLM context via the parse/extract endpoints.