healthcare-clinical-triage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow ingests locally stored files (clinical_notes.json) containing free-text clinical note content into the agent at runtime; if those notes are outsider-authored (e.g., provided by external patients/providers), this is an indirect prompt-injection exposure path via the analyzer reading that file and passing text to the LLM.