portfolio-pulse

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow reads only first-party, user-owned data via personal_holdings/personal_profile and then fetches news for the user’s held tickers using news_browse (i.e., it selects specific holdings first rather than ingesting arbitrary outsider-submitted text).