INFOtests/smoke_tests/integrations/promptlayer/test_promptlayer_integration.py — HEURISTIC: this file both fetches external content and returns content as tool output, with no obvious sanitization. External text returned into tool output can carry instructions an agent obeys (prompt-injection passthrough). Confirm manually; this is a hint, not proof.
INFOtests/smoke_tests/task/test_smoke_task.py — HEURISTIC: this file both fetches external content and returns content as tool output, with no obvious sanitization. External text returned into tool output can carry instructions an agent obeys (prompt-injection passthrough). Confirm manually; this is a hint, not proof.
INFOtests/unit_tests/safety_engine/test_skill_policies.py — HEURISTIC: this file both fetches external content and returns content as tool output, with no obvious sanitization. External text returned into tool output can carry instructions an agent obeys (prompt-injection passthrough). Confirm manually; this is a hint, not proof.
INFOsrc/upsonic/_utils.py — HEURISTIC: this file both fetches external content and returns content as tool output, with no obvious sanitization. External text returned into tool output can carry instructions an agent obeys (prompt-injection passthrough). Confirm manually; this is a hint, not proof.
INFOsrc/upsonic/tools/builtin_tools.py — HEURISTIC: this file both fetches external content and returns content as tool output, with no obvious sanitization. External text returned into tool output can carry instructions an agent obeys (prompt-injection passthrough). Confirm manually; this is a hint, not proof.
INFOsrc/upsonic/embeddings/bedrock_provider.py — HEURISTIC: this file both fetches external content and returns content as tool output, with no obvious sanitization. External text returned into tool output can carry instructions an agent obeys (prompt-injection passthrough). Confirm manually; this is a hint, not proof.
+ 4 more in this check