teleport-acl-lifecycle

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the update/delete workflows, the agent captures and parses Teleport access-list JSON from $TCTL acl ls --format=json / $TCTL acl get <identifier> --format=json, which includes first-party list metadata fields like spec.description that an outsider user can potentially influence via access-list content, and the LLM then reads that untrusted free-text during candidate selection and drafting (with only detection/flagging, not sandboxing).