drupal-migrations

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The README explicitly shows a JSON/API migration using the source plugin "url" with an HTTP data_fetcher and external URLs (e.g., 'https://api.example.com/users') and states it imports data from JSON/external APIs, so the agent would fetch and interpret untrusted third-party content as part of its workflow.