cowork-home-inventory

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow ingests a user-supplied folder of photos and receipts (including receipts via email exports/images), and the LLM would read the free-form text extracted from those outsider-authored documents at runtime (e.g., receipt text, email-export text), creating an indirect prompt-injection risk.