governance

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). High: the workflow requires reading a sector reference file at runtime, and that file (e.g., references/uganda-governance-sector.md) is sourced from external entities (AfDB/UN CDN content) containing free-form prose/statements that could carry indirect prompt-injection text into the agent’s LLM context.