doc-drafter

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow explicitly treats the user-provided brief and any reference document as “untrusted” (rule 7), meaning the LLM ingests outsider-authored free text when the operating user pastes or points to content written by others (e.g., an old contract or email brief), which can carry prompt-injection payloads.