kuva

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow ingests user-provided CSV/TSV via stdin (often through DuckDB read_csv(...) piped into kuva), so any free-form text contained in that outsider-supplied data becomes LLM-readable context at runtime (e.g., column values/headers used to generate plots).