kelly-radar

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Runtime path reads Busabase records into the AirApp snapshot and then renders their free-text fields; outsider-authored content can enter via the monitoring/research pipeline (evidence, diffs, summaries, questions, follow-ups) and is ingested without selecting a specific item (e.g., watchlist/signals/questions/reports Bases are bulk read on loadState).