modal

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider free text can enter the LLM context via the runtime web endpoint path (e.g., @modal.fastapi_endpoint / @modal.asgi_app / @modal.web_server), where request bodies like prompt: str or text: str are user-supplied and not authored by the operating user.