kelly-demo-video-factory

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The AirApp runtime reads outsider-authored free text from Busabase records—specifically videos fields like hook/pain-point/concept/verified-claims and video-shots fields like script-line—via busabaseProvider.getState() (records.list) and immediately renders them in the browser (renderVideoDetail / renderMarkdownTable) without any prior “select specific item” step beyond loading the current dataset.