finance-report

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text is ingested via the Perplexity MCP calls in workflows/FullResearchWorkflow.md (Phase 1: mcp__perplexity__search / mcp__perplexity__reason), and that returned prose is then passed into ReportGenerator.add_sentiment_section() / executive summary fields to be rendered into the PDF (LLM context risk via untrusted web-derived text).