service-itsm-agentic-setup-cmdb-coordinate

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow ingests the user’s free-form chat to extract the target org, already-done layers, and constraints (Step 1), then uses that (after explicit confirmation and menu selection) to drive subsequent Salesforce/CMDB configuration actions, so outsider-authored text can influence runtime behavior though it is not described as being used to auto-fetch arbitrary external content.