kelly-disclosure-tracker

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Source-generated review text from the user’s Busabase-controlled items Base (fields like title, summary, reason, reconciliation, and decision-comment) is ingested at runtime via busabaseProvider.getState() → readAllRecords("items") and then rendered, so outsider-authored Busabase records can be processed without the agent selecting a specific item.