kelly-lesson

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the Busabase runtime path, the app ingests outsider-submitted teacher/plan free text indirectly because the UI reads all records from the user-controlled plans and checks Bases (via busabaseProvider.getState() → readAllRecords("plans")/readAllRecords("checks")) and then renders fields like plan.feedback_draft, plan.decision_note, check.evidence, and suggestions into the client state without any upfront selection step.