crisis-response-planner

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The crisis-response-planner runtime ingests “the incident evidence itself (User-provided: exports, screenshots, forwarded emails)” and treats pasted mention exports/DM screenshots/forwarded journalist emails as untrusted input, which an outsider can supply as free text content via the required workflow’s incident-triage mode.