expanso-encryption-patterns

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow runs expanso run -c "$SCRIPT_DIR/pipeline.yaml" which starts an HTTP server (pipeline.yaml input http_server.path: "/encrypt") that will ingest runtime request bodies as plaintext data into the pipeline mapping processors; those request bodies are outsider-authored free text (external clients), which is then read by the pipeline at LLM/context time where mapping expressions operate on this.* fields.