analyzing-email-headers-for-phishing-investigation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow processes email files (EML/MSG formats), which inherently contain outsider-authored content (phishing email bodies, headers, and attachments) ingested by the LLM during security investigation and analysis.