enterprise-carbon-credit-rating

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Source text exposure occurs because the required runtime workflow ingests “客户提供的全部材料（Word、Excel、PDF、图片/OCR 文本、既往报告或纯文本）” and then uses Codex to extract fields for scoring and report generation, meaning outsider-authored text provided via those customer materials is LLM-readable at runtime.