applying-cms-brand

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow calls get_brand_instructions to retrieve promptBody from Salesforce CMS brand content (i.e., text authored/maintained by an outsider to the operating user), which is then fed into the agent’s LLM context as the brand instruction prompt.