langfuse-session-list

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The script fetches and parses session data from the Langfuse API (e.g., LANGFUSE_HOST /api/public/sessions, defaulting to https://us.cloud.langfuse.com), which is third-party, likely user-generated session/trace data and is read and displayed by the agent at runtime, exposing it to indirect prompt-injection risk.