tres-report-analyzer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow reads the user-uploaded XLSX report file (all relevant sheet cell values via openpyxl.load_workbook(...) and iter_rows(values_only=True) in scripts/analyze_report.py), so outsider-authored text inside the spreadsheet is ingested directly for analysis.