commercial-lease-analyzer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow ingests the user-provided lease/LOI text (outsider-authored only if the operating user didn’t author it), and step 3 explicitly requires verbatim clause quoting from that document, which would be free-form text read into the agent’s LLM context at runtime.