kr2s-was-i-exploited

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow instructs the operator to scan an Active Storage-backed Rails application (via scripts run in the application’s production console and evidence from production JSONL/variants), which includes LLM-readable free text that originates from outsider-controlled uploads/files (crafted blob payloads and related logs/query outputs).