ticket-lifecycle

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The required workflow ingests customer tickets from multi-channel sources (email/chat/web form/social) and uses their content to draft responses, so outsider-authored free text (the customer’s messages) is read at runtime and fed into the agent’s LLM context.