databricks-parsing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime path reads outsider-authored free text when ai_parse_document(content) is applied to arbitrary binary files ingested via read_files('/Volumes/...', format => 'binaryFile') from Unity Catalog Volumes, and then the extracted document.elements[].content is used in downstream LLM querying.