procurement-offer-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). In OFFER-REVIEW mode the workflow extracts readable text from the supplier’s offer file at runtime (DOCX via python-docx/author comments + XML, or PDF via pypdf), and that vendor-authored content is then fed into the agent’s LLM for clause/arithmetic/comparison checks—classic outsider-authored free text injection surface.