databricks-metric-views

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.78). Metric View Advisor ingests outsider-authored free text from user-provided assets at runtime—e.g., it fetches and parses AI/BI dashboard serialized_dashboard JSON (including widget/dataset SQL queryLines) and Genie space serialized_space instructions/questions, which are not authored by the operating user and are then synthesized into YAML/LLM context.