plantuml

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow can ingest outsider-authored free text at runtime via the user’s own request content that is used to generate PlantUML code (i.e., the model conditions on arbitrary user-provided diagram descriptions/messages), which are not guaranteed to be authored by the operating user.