gathering-growth

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The Wren phase (Phase 5: POLISH) explicitly ingests and audits "pages linked in approved posts" — i.e., arbitrary public linked web pages' meta tags/OG images/descriptions — and may apply fixes, which means the agent fetches and acts on untrusted third-party page content as part of its required workflow.