reg-gap-analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The workflow ingests “regulation (or summary/guidance)” from the user-provided /privacy-legal:reg-gap-analysis [paste guidance / reg text] free-text input, which is outsider-authored content if the operating user pastes text they did not author (e.g., regulator guidance/reg text), and that text is then read by the agent’s LLM during requirement extraction.