iris-development

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text can enter the LLM context via the promotion worker: add_session_event enqueues a job, and the managed worker reads the session’s content[].text (authored by the operating user’s end-users/other parties) and calls an LLM to extract durable facts.