hotchocolate-best-practices

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). These skill documents describe HotChocolate GraphQL server patterns where resolvers accept client-provided GraphQL arguments (including QueryContext<T> selection/filter/sort) and use DataLoaders to fetch based on those inputs at runtime, which means outsider-authored free text (GraphQL request contents) can flow into resolver logic without selecting a specific item first.