kelly-lead-funnel

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In busabaseProvider.getState(), the runtime reads all Busabase leads rows via readAllRecords("leads") and then renders the free-text brand_name/city/category/lead_source/notes[].text/stage_history[].reason/rejection_reason fields from those rows into the UI (including note/reason text) without any LLM involvement.