remix-apple-notes-ad-from-sample

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider-authored free text from the Apple Notes source sample is ingested via get_ad_template { template_id: source_sample_id } (using recipe.note / extracted_script) and then mirrored into the in-session approval message (append_project_message { ... content: <the script> }), which the agent/LLM reads and uses to draft the brand note.