track-findings

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime the workflow reads scan-manifest.json and findings.json from the user-provided sealed Codex Security scan (validated only by scripts/validate_tracking_source.py), and then uses that scan’s string content to construct and preview the exact provider payloads before mutation.