api-graphql-mercurius

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow is to register Mercurius as a Fastify plugin and execute GraphQL requests/subscriptions, which causes the LLM context to ingest outsider-authored free-form GraphQL query strings (and possibly connection_init/headers payloads) provided by external clients over HTTP/WebSocket.