reading-business-cards

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow reads outsider-authored content by ingesting user-provided business-card images, tiling/cropping them in prep_cards.py, and then sending the resulting image tiles to the LLM in extract_cards.py via the view/call_haiku path (base64-embedded PNGs).