kelly-messenger

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime reads outsider-authored free text from messaging content stored in Busabase (accounts/conversations/messages/replies bases), which are populated from user-supplied/queue-ingest paths like scripts/sync_messages.mjs / scripts/ingest_messages.mjs and then rendered/used in the app UI.