kelly-legal-firm-radar

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The AirApp reads outsider-authored free text from the Busabase items/entities/checks bases (e.g., title, summary, body, recommendation, detail, decision_note) via busabase-provider.js → loadState/getState() into firm-radar-model.js snapshots, which are then rendered in the UI.