dspy-react-agent-builder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's search tool and ResearchAgent.search call a ColBERTv2 retriever pointed at 'http://20.102.90.50:2017/wiki17_abstracts', returning wiki text passages that the agent ingests and reasons over (public/user-generated content), which could carry untrusted instructions enabling indirect prompt injection.