tech-intel

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). Outsider free text from X/Twitter is ingested at runtime via TwitterListSource.collect() → _extract() and _full_detail() (tweet text + full thread) and then embedded into the LLM prompt in core/generate.render_items_block() / render_prompt() as text and context_text.