nyc-property-report

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow queries the NYC Open Data Socrata API and processes property records, permits, violations, and public filings. While these data sources are hosted by a government entity rather than curated from an uncontrolled social platform, the Socrata API returns unstructured text (such as complaint descriptions, violation notes, party names, and job descriptions) submitted by members of the public or third-party applicants. Ingesting this data via API queries without prior item selection falls under the medium risk category.