social-media-analyzer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/calculate_metrics.py, the workflow ingests the user-provided campaign_data (platform and posts[].likes/comments/shares/saves/reach/clicks/impressions) at runtime to compute engagement/CTR/ROI, so outsider-authored free text could be included in fields (e.g., post content) even though the code only uses numeric counters.