business-news-research-coordinator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The coordinator explicitly launches scraper agents that fetch and ingest headlines/content from public third-party news websites (e.g., bloomberg.com, reuters.com, ft.com, cnbc.com, businessinsider.com, forbes.com, techcrunch.com, theverge.com), which the agent then reads and synthesizes, exposing it to untrusted external content that could carry indirect prompt injection.