acceptance-criteria

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow ingests outsider-authored free text because it fetches and processes ServiceNow record fields like rm_story.description/rm_story.short_description and rm_epic.description via tools (SN-Read-Record/SN-Query-Table), and those records can be authored/posted by untrusted users.