roof-rfp-extract

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). This skill ingests the owner’s roof replacement RFP text (the tender’s “Required Content”/“Submission Requirements” block and other RFP sections) into the LLM context for extraction; that RFP body is outsider-authored free text (not authored by the operating user) and is copied verbatim at runtime.