canva-bulk-create

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). High: Step 1 “URL: fetch the resource and parse the response as tabular data” and Step 1 “Uploaded file / Pasted data” can ingest outsider-authored free text (public web pages or user-provided content not authored by the operating user) into the agent’s LLM context for parsing and previewing.