gdpr-ccpa-privacy-auditor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow ingests outsider-authored free text via user-provided policy_text (and likely also loads the outsider-controlled website_url during passive scanning to extract cookies/scripts), so an attacker can supply or control the text the LLM analyzes.