kelly-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required runtime, the AirApp loads user/outsider-authored free text from Busabase records—e.g., anomaly fields like draft, reason, customer, and evidence rows—via app/app/js/providers/busabase-provider.js getState() → readAllRecords("anomalies")/buildSnapshot() and then renders them in app/app/app.js/app/app/js/audit-views.js (including editable draft and agent_notes).