ard-registry-builder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Workflow 3 (scripts/test_registry.py) sends POST /search to a runtime-supplied registry base URL and ingests the returned JSON response body (including results[].displayName/type/url/identifier/score/source) into the agent’s context for reporting, which is outsider-authored free text from an external service.