expanso-transform-formats

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The required workflow ingests outsider-authored free text from the HTTP request body at runtime (input.http_server.path: /transform with allowed_verbs: ["POST"]), which is read as this.string() in the first mapping processor and then placed into the LLM context via root.raw/subsequent processing.