llm-obs-trace-rca

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow ingests outsider-authored free text from Datadog LLM Observability traces via MCP/pup tools like search_llmobs_spans → get_llmobs_span_details/get_llmobs_span_content, where span fields such as messages, documents, input/output, and error messages can include user- or third-party–authored content that the operating user did not choose to introduce.