posthog-customer-deep-dive

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Outsider-authored free text from the user’s specified domain/account is read at runtime via Vitally conversation bodies and calendar invite/meeting transcripts (Gong/Wispr/Quill) / support-thread bodies, and those texts are then used verbatim/quoted in the email and call-prep artifacts.