aws-bedrock-agentcore-skill

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text can enter the LLM context via the runtime’s required /invocations request body (user-provided prompt/payload) which is not authored by the operating user; the agent then passes that text into the model at runtime.