ray-data

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). Ray Data’s runtime workflow can ingest readable free text from outsider-authored sources when it loads datasets from external locations (e.g., ray.data.read_parquet/read_csv/read_json on s3://.../gs://...), where the file contents (including text fields) are not authored by the operating user.