casualize-names

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The scripts (e.g., scripts/casualize_batch.py and the other batch scripts) call gspread to read rows from a user-supplied Google Sheet (worksheet.get_all_values()) and directly interpolate those untrusted, user-generated cell values into prompts sent to Claude (e.g., the records_json/prompt in casualize_batch.py), so third‑party sheet content can influence the model's outputs and downstream actions.