kelly-listing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Kelly Listing ingests outsider-authored free text from the user’s Busabase workspace records (products/drafts/settings/claims/claim_rules), which are read at runtime by app/app/js/providers/busabase-provider.js:getState() via readAllRecords() and then fed into the compliance engine/UI.