ops-cost-optimization

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow instructs the Cost Auditor subagent to ingest “billing screenshot[s]” or “usage data summary … [user-provided]” and parse them into cost line items at runtime, meaning outsider-authored free text can be supplied indirectly via user/submitted billing data.