restaurant-social

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow includes runtime WebSearch(...) to fetch public web content (e.g., restaurant pages/menus/events from the web) and then uses that gathered text to generate the calendar, which can include outsider-authored free text (public web pages) ingested into the LLM context.