kelly-money

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required runtime workflow, the app’s busabase-provider.js reads all free-text fields from Busabase bases (records.list for accounts, transactions, invoices, invoice_matches, and settings) and then renders them in app.js, so any outsider-authored record content in that queue/feed path is ingested as LLM-visible text at runtime.