access-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow ingests untrusted identity/entitlement metadata at runtime (e.g., role names, group descriptions, policy metadata and other entitlement fields), which can contain adversarial free text authored outside the operating user’s control (indirect prompt injection risk via those data fields).