kelly-invest-stock

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Busabase provider runtime reads all outsider-authored Busabase record fields (including longtext like reason, supporting_evidence, counter_evidence, source_note, etc.) via records.list/paged fetch in busabase-provider.getState(), then the UI renders those free-text fields directly.