digital-health-clinical-asr-eval

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The runtime path ingests outsider-authored free text from the user-provided manifest.jsonl rows (row.text as ref) and sends it to the external NVIDIA NVCF ASR service during Step 3b (offline_recognize), which is indirect prompt injection exposure via arbitrary manifest content.