change-risk-explanation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s required workflow reads first-party ServiceNow free-text fields (e.g., change_request.description, short_description, change_plan, backout_plan, test_plan) by calling SN-Get-Record/GET /api/now/table/change_request/[CHG_SYS_ID], where outsiders can author the change request content.