seo-aeo-geo-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required runtime workflow, outsiders can submit free text via the harness’s held-out-cases.json prompts/observations which are injected into the target agent at runtime (and sent to the OpenRouter POST body when openrouter runner is selected).