expanso-db2-to-bigquery

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). Runtime path reads outsider-authored free text from DB2 via the configured ODBC SQL (pipeline.yaml input sql_select/where), which can contain arbitrary string values (e.g., MERCHANT_NAME, ACCOUNT_NUMBER) that are fed into the mapping processors and thus into the LLM-execution context where injection payloads could exist.