sql

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill’s runtime is the user’s free-text prompt routed to “sql” and used to generate SQL, but the provided materials show no workflow that ingests any other outsider-authored free text source (e.g., email/tickets/chat/social feeds or arbitrary external pages); it only processes the prompt the caller supplies and then emits SQL heuristics/lints over first-party .sql files.