hedgefund-bain-competitive

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow ingests outsider-authored free text only via a web_fetch of third-party sources (e.g., 10-K/annual reports, IDC/Gartner/Statista, or company IR) to populate market-share/R&D figures, which could include attacker-injected text if those sources are not first-party/trusted.