and-pack

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Pack’s required runtime workflow ingests and reads “work body, comments and receipts, latest State Reason, triage and clarification decisions… and attachments” from a specific work record/wayfinding source, which is outsider-authored free text when the outsider submits it into that work system without first selecting a specific trusted item.