alibabacloud-waf-rule-management

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). At runtime, the workflow queries SLS logs via aliyun sls get-logs-v2 and then feeds the returned log fields (e.g., matched_host, real_client_ip, request_path, final_rule_id, etc.) into the diagnosis engine and ultimately into the agent’s LLM context as “Context Information”/analysis text, which is outsider-authored free text originating from the user’s traffic/log stream.