client-instruction-schedule

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads an entire litigation folder supplied by the firm (“Read everything, identify by content”), so any outsider-authored free text contained in those submitted case documents (e.g., letters/statements from an opponent) would be ingested at runtime.