conversion-tracking-health

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflows (scripts/portfolio_conversion_audit.py and scripts/last_conversion_dates_by_action.py) query conversion action names and dates from Google Ads for attacker-chosen accounts (via --cid/--cids/--accounts-file), and then print those free-text fields directly into the console without any selection or sanitization barrier.