kelly-clm

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The Kelly CLM AirApp loads and ingests free-text fields (e.g., contract name/counterparty/value/next_action, obligation title/evidence, approval title/summary/decision-note) from Busabase record payloads via busabase-provider.getState()→readAllRecords() and then renders/uses them at runtime in app.js (e.g., search/filtering and innerHTML rendering), allowing outsider-authored content inserted into the same tenant Space/Bases to be consumed without selecting a specific item first.