who-really-owns-it

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow instructs the agent to “pull the filing history” and “read the officer/ownership/charges records” from corporate registry records (e.g., UK Companies House/SEC EDGAR/ICIJ Offshore Leaks), which are outsider-authored primary sources that users can steer the workflow to by providing an entity name/number/person to resolve.