expanso-production-log-pipeline

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow starts an HTTP server (pipeline.yaml:10-16) that ingests arbitrary POST request bodies as JSON documents (pipeline.yaml:17-22) and then runs free-text mappings over fields like this.message (pipeline.yaml:23-29, pipeline.yaml:57-66, pipeline.yaml:68-76), which would become readable prompt/context material for the pipeline’s LLM-equivalent processing—thus outsider-authored free text (client log messages) is fed at runtime.