kelly-social

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime path that ingests outsider-authored free text is the app’s Busabase “posts”/“engagement” records (fields like posts.text and engagement.incoming_text) loaded by the AirApp client and rendered into the UI, so any user-controlled content written into those Bases could flow into the LLM during gate evaluation/drafting.