experience-cms-brand-apply

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow calls search_brands and then get_brand_instructions, which fetches brand content authored/managed by third parties in Salesforce CMS (outsider-authored free text) and injects it into the agent via the promptBody used for extraction/application.