dt-setup-android

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads outsider-provided free text from the project’s build/source files at runtime (e.g., root build.gradle(.kts), settings.gradle(.kts), and APP_MODULE sources/AndroidManifest.xml), which can contain attacker-controlled content that the agent ingests and parses/extracts (e.g., dynatrace {} block values and entry-point locations).