kelly-financial-services-intel

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md the runtime batch workflow explicitly does “Browse or otherwise collect current public evidence” (step 2) and then uses that evidence to build signals/actions/drafts before writing them into Busabase (steps 3-4), so outsider-authored free text from public sources can be ingested at runtime via the evidence collection step.