personal-wiki

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The ingest workflow explicitly fetches and saves arbitrary URLs ("Save Raw Materials (URL/text only) — URL → Fetch and save to raw/articles/") and the agent then reads and interprets those fetched web/articles/papers to create/update wiki pages and take follow-up actions (e.g., create pages, update index, auto-fix during lint), so untrusted third‑party content can materially influence behavior.