gcp-deploy-guardian

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In pre-deploy-check.sh, the runtime workflow ingests outsider-controlled free text via the required input bash ...pre-deploy-check.sh "<docker-build-command>", then performs substring/regex scanning over that provided command (and checks for cloudbuild*.yaml/Dockerfile files in the working directory) for http:// and other patterns, so an outsider can POST arbitrary command text to whatever queue/UI supplies that parameter.