raffle-winner-picker

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow reads winner-eligible text from user-supplied Google Sheets/CSV/local lists (e.g., “Pick a random row from this Google Sheet… [Sheet URL]” or “Pick 3 random winners from entries.csv”), meaning outsider-authored free text can be ingested from those provided sources.