kelly-writer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required runtime, the AirApp UI loads Busabase “drafts”/“settings” via busabaseProvider.getState() and then renders fields like item.title/item.body without any explicit outsider-specific search/fetch step, so any outsider-writable record content that ends up in the subscribed Busabase bases becomes LLM-readable free text at runtime (indirect prompt-injection surface).