secret-development

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The MySecret implementation performs axios requests to the configurable endpoint (${this.options.endpoint}/secrets/${this.project}/${key}), meaning the adapter can fetch arbitrary third-party/user-controlled HTTP content and returns that data for the agent to read/interpret.