kelly-llm-gateway

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Source text that is produced by outsiders (e.g., Busabase “routes/services/models/settings” records populated via an external usage-ingestion process) is read at runtime by busabaseProvider.getState()/readAllRecords() and then rendered in app/app/app.js (e.g., via state.snapshot.routes, route.note, and anomaly ack_note), without selecting a specific item first.