init-project

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow includes a “web search pass” and “current docs lookup” (e.g., web search: ... and npx ctx7@latest docs ... in references/best-practice-discovery.md), which can fetch outsider-authored public web pages and inject their readable text into the agent’s LLM context.