survey-analyzer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow ingests the operating user’s provided “survey responses” as free-form text via the [PASTE SURVEY RESPONSES] placeholder inside <survey_data>, and this content is not inherently guaranteed to be authored by the operating user (it could be outsider-authored respondent text), creating an indirect prompt-injection risk.