chatbot

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Source text exposure is only user-provided chat messages to the public website bot, which are treated as “data not commands” and the bot’s policy is grounded-or-handoff (it does not read outsider-authored external documents/feed items unless retrieved from approved KB).