blog-master-orchestrator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The workflow's Phase 1 Research (workflows/ExecutePhase.md) instructs spawned researcher subagents to "Execute comprehensive research" and produce "supporting data and statistics" and "source documentation," and the Parallel Research Mode explicitly invokes external researchers (e.g., "perplexity-researcher", "gemini-researcher"), which implies ingesting open/public third‑party content that the agents will read and interpret.