contract-delivery-kickoff

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required read runtime workflow, the agent ingests outsider-authored free text by parsing a user-supplied contract Office file (cmd_read → load_document(args.source) → extract_text(path)/document_tables(path)), so an outsider can provide arbitrary .docx content that the LLM will read and incorporate into outputs.