kelly-sales-outreach

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In busabase-provider.getReadinessState() and getState(), the app reads full record contents from the user-selected Busabase Bases (profile, companies, leads) and then renders/stores those record fields (including email-body/match-reason text) for the desk flow, meaning outsider-authored text placed into those bases at the tenant level is ingested at runtime.