data-analysis-report-generator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Outsider-authored free text can flow into the generated HTML via user-uploaded Excel/CSV cell values/column names that are ingested by scripts/analyzer.py and then embedded into {{CHART_DATA_JSON}}/template fields and rendered in assets/report_template.html (e.g., chart titles/labels and {{INSIGHTS}}).