payment-invoice-lookup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). During workflow steps 5A/5B the agent issues well_query_records against Well’s MCP server to read invoices, transactions, and invoice_transactions, using user-supplied lookup fields (invoice/transaction/date/amount/counterparty or time window) to select specific records, so outsider-authored text is not ingested as free content but only as structured search parameters.