working-capital

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow ingests outsider-authored free text when it “Search[es] SEC filings for context” and “Extract[s] management commentary … with document citations,” i.e., it reads filings content authored by external parties (companies), which the LLM can treat as untrusted free text at runtime.