preference-frequency-manager

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow ingests outsider-authored free text when it reads a user-provided/manual “email platform” (ESP) export and “untrusted input” files at step 2 (inventorying the current opt-out path) and step 54 (treat every exported/fetched file as untrusted input per SECURITY.md), where ESP exports can contain free-text (e.g., unsubscribe/preference update signals or related content) supplied by the workflow user.