expanso-parse-logs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required workflow is executing a local Expanso pipeline (run.sh → expanso run -c .../pipeline.yaml), and the pipeline defines an HTTP input endpoint (pipeline.yaml config input.http_server.path: /logs) whose request body/log text is ingested as free-form content (this.string() and stored into root.original/root.raw_content), meaning outsider-authored log text from callers can be fed into the runtime processing/LLM-adjacent context if Expanso’s mappings are executed by an LLM-enabled stage.