anibon-donation-classifier

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow uses the operating user’s live-stream transcript to detect and classify the viewer’s paid message content; that transcript includes outsider-authored donation text (public/social channel chat) which would be read by the agent’s LLM at runtime for classification.