soia-pkm-transform-article-ppt

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads the user-supplied “source” article file at runtime and extracts its full text (e.g., headings/concepts) via extract_source() for planning and later content-grounded generation, making outsider-authored free text (the article body) an input to the LLM.