portaljs-add-resource

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow ingests outsider-provided free text via user-supplied SOURCE URLs (or local path inputs) and fetches/copies the resulting content into PORTAL_DIR/public/data/, while also accepting user-entered metadata fields like RESOURCE_NAME and DESCRIPTION that are written into datasets.json.