sentry-debug-issue

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The required workflow uses Sentry MCP tools (e.g., search_issues, search_events, execute_sentry_tool/get_sentry_resource) to fetch issue/event details at runtime, and those fields (exception messages, breadcrumbs, request bodies, tags, user context, stack frames, etc.) are explicitly treated as untrusted free text that will be ingested into the agent’s LLM context.