formsg-oracle

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow ingests outsider-authored free text via searches of Notion pages and Slack threads (e.g., Notion:notion-search/Notion:notion-fetch and Slack:slack_search_public_and_private/Slack:slack_read_thread), which can include content authored by untrusted users.