bookkeeping

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider free text can enter the LLM context via receipt-processing when it ingests and extracts receipt/invoice content from the user’s email inbox (messages authored by third parties like vendors), which is then normalized and used for downstream categorization/reconciliation.