auto-repair-estimate-decoder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow explicitly ingests the user-provided “estimate text” (and photos/writeup) to produce a line-by-line decode, so outsider-authored free text is directly consumed without requiring prior selection from a trusted feed.