dt-sec-contextualization

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). This skill ingests outsider-authored free text indirectly at runtime via Dynatrace security.events fields (e.g., object.name, affected_entity.name, related_entities.*.names, and IoC values) used in queries like the natural-language fallback (contains(lower(object.name/affected_entity.name/...))) and IoC-enrichment reverse lookup (expand ioc = threat.observables.* then filter in(ioc, array(...))), so provider users can poison those event fields.