yao-geo-effect-monitor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.72). Required workflow includes “权威参考扫描” and “执行采样并记录环境”，which at runtime can fetch/ingest public web content and platform-provided answer text (outsider-authored free text) into the agent’s LLM context via the data acquisition modes (e.g., browser-assisted sampling / authorized API / external source ledger).