kelly-behavior-predict

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The app’s runtime workflow reads free text from Busabase sessions/segments/settings records via busabaseProvider.getState() → readAllRecords() (runtimeClient.records.list) and then renders fields like decision-note (outsider-authored user input) into the UI for further processing.