experience-cms-brand-apply

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow calls get_brand_instructions to retrieve promptBody from Salesforce CMS (managed content authored by others/outsiders), and that retrieved free-text prompt template is then fed into the agent’s LLM context to guide generation.