trust-center

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Outsider-authored free text from public visitors (name/email/company/reason) is ingested into DynamoDB via the runtime API route POST /api/documents/:id/request-access in references/api-handler.py, and that stored text is later rendered in the admin dashboard (GET /api/admin/requests) in references/frontend-files/src/pages/AdminDashboard.jsx.