defi-pnl

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Runtime ingestion is via user-supplied ledger JSON files passed on the command line to scripts/boundary_pnl.ts (e.g., per-wallet mode reads ledgerPath with readFileSync and then feeds rows into compute/RPC valuation), so the LLM processes outsider-controlled free text fields within those JSON rows (e.g., symbols/names/flags) before computing/printing results.