signals-scout-surveys

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). Open-text survey response bodies (free text authored by survey respondents, i.e., outsiders relative to the operating user) are fetched at runtime via execute-sql over events (event = 'survey sent') in the “Open-text pull (theme aggregation)” workflow, and those responses are then quoted verbatim into the LLM context during clustering/report evidence.