saas-procurement-and-security-questionnaire

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required workflow asks to tailor and submit a “security questionnaire pack” using “buyer, ToR, approved records, or discovery,” which implies ingesting buyer-issued tender/security questionnaire text (outsider-authored procurement artefacts) into the LLM context at runtime.