drop set of injection attempts · cluster + attribute to authors · runs locally
injection attempts · local only
heuristic screener · vendor schema varies · not definitive proof