candidate-sourcing-and-ranking

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow reads candidate profiles and resumes (which are outsider-authored free text processed at runtime during sourcing and ranking), creating an indirect prompt injection risk scored as low because the agent must actively search/fetch profiles rather than consuming an unprompted inbox or feed.