nhcx-payer-coverage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow ingests inbound callbacks from NHCX containing external hospital free text and FHIR payloads (e.g., in C1-callback-door.md, C2-coverage-eligibility-check.md, C3-insurance-plan-request.md), which can be submitted by outsider hospitals interacting with the payer system.