kelly-legal-matter-strategy

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the runtime UI flow, the app reads live Busabase records for the items/entities/checks/settings bases in busabase-provider.js (readAllRecords(...) → getState() → buildSnapshot()), and those fields include agent-reviewed free-text like title, summary, body, recommendation, draft, decision_note, and issue_tree, so any outsider who can inject that content into the app’s Busabase Space (e.g., via records list/change-request path) can have it ingested without first selecting a specific item.