clerk-backend-api

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required runtime workflow fetches user records from the Clerk Backend API (api.clerk.com/v1), and user-controlled profile fields such as names and usernames can be set by outsiders who sign up, so the agent ingests outsider-authored free text after its own explicit API call rather than from a monitored inbox or feed.