receipt-expense-workflow

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Required runtime path receipt_sorter.py reads outsider-authored receipt text indirectly at runtime by ingesting user-provided files from the input folder (CLI --input / incoming/unassigned), running OCR (ocr_file/ocr_image_obj/ocr_pdf) to obtain free text, then using that text for extraction/classification and writing *_summary.md.