cloud-security

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime, scripts/cloud_posture_check.py ingests outsider-provided free text via args.input_file (a user-supplied JSON file) and parses statement fields into risk-finding descriptions (e.g., analyze_policy() → analyze_statement()), without selecting a specific “trusted item” first.