oath

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Oath’s vendor_risk_assessment and audit_trail_design rely on evidence inputs like SOC2 reports, questionnaire responses, and ticketing artifacts, which at runtime may include outsider-authored free text provided by third-party vendors or via externally stored records that the job consumes.