proposal-import

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow reads the user-provided proposal PDF text (“Read the PDF directly…ask the user to paste the text…then proceed identically”) and also parses the proposal’s trailing references: metadata block for DOI/title strings, so outsider-authored free text can be ingested via the source document itself.