fsi-ib-datapack-builder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The workflow explicitly ingests “web search for public filings” and “uploaded documents” (outsider-authored public web content / documents) in Phase 1 Step 1.1–1.5, which can become readable prose in the agent’s LLM context for extraction/normalization.