customer-story-builder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow is a “customer story builder” that takes raw customer-provided free text (e.g., interview transcripts, Slack/email quotes, survey comments, support ticket excerpts, and review excerpts) as input and then uses it to generate outputs, so outsider-authored prose can be fed into the agent’s LLM context via the user-supplied “Raw Input” fields.