paw-pa-intake

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). Outsider free text enters the LLM context when the user provides a public URL for audio/video, because scripts/transcribe.py passes that URL to AssemblyAI and writes the resulting diarized transcript as readable transcript.md which the agent then reads for structured extraction.