identify-employees

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Runtime path ${XDG_CONFIG_HOME:-~/.config}/agentic-analytics/bucket.json points to a customer’s DuckDB/Parquet lake (“DPL events”), and detect_employee_filter.py reads extra_data from that lake (collect_extra_data_stats → SELECT extra_data FROM dpl_events WHERE action = 'pageview' [AND apikey=?]), so free-text originating from that customer’s event payloads (outsider-authored pageview extra_data) is ingested at runtime for key/value detection.