site-visit-report

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Step 2 and Step 3 read “the supplied notes, photos, drawings, files, and relevant conversation” to populate direct observations/participant-reported info/interpretations, meaning outsider-authored text can be ingested if a user supplies it into those sources.