debug-failed-run

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow in Step 2 (“Correlate with ClickHouse logs (ClickStack MCP)”) ingests ClickHouse Logs source fields like Body (free-form log text authored by external systems/tenants) into the agent context via the ClickStack MCP search/SQL results, creating an indirect prompt-injection risk.