triaging-live-sql-activity

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime SQL triage reads live query/session/transaction text from CockroachDB system views (SHOW CLUSTER STATEMENTS, SHOW CLUSTER SESSIONS, crdb_internal.cluster_transactions), which include query text authored by other users/apps (outsider-originated free text) and can be ingested into the agent context via the returned query, active_queries, or txn_string fields.