kelly-family-fund

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime path app/app/js/providers/busabase-provider.js:getState() reads free-text fields from user-controlled Busabase records via runtimeClient.records.list for bases beneficiaries, families, income, expenses, and settings, then the UI renders that text without any first selecting a specific “safe” item.