recruit-report-pdf

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In STEP 1-2 the workflow scans the current directory for RECRUIT-*.md files and reads/parses their free-text contents to extract scores/findings, so outsider-authored markdown submitted into that directory can be ingested at runtime.