kelly-beauty-intel

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime UI (AirApp) loads Busabase records—signals/actions/drafts/source excerpts generated from external monitored sources—via busabaseProvider.getState() → readAllRecords("signals"/"actions"/"drafts"/"sources"), so outsider-authored free text can enter through those records and be ingested at runtime for display/decision.