health-log-analytics

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow queries ServiceNow tables that may contain outsider-authored free text fields (e.g., sa_anomaly.description or em_alert.description) via SN-Query-Table/REST endpoints, so an outsider who can create log sources/alerts/anomalies could have their text ingested without selecting a specific item first.