dt-sec-insights

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Source and runtime path: the skill’s DQL queries read from security.events (including external ingested *_FINDING text fields like finding.title/finding.type and potentially event.description) via the cross-provider and compliance templates, e.g. in references/all-security-events.md the “canonical cross-provider” and other pipelines fetch security.events without any prior selection of a specific trusted item.