issue-validator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow queries and executes background scripts that read and process fields like short_description, description, risk_rating, profile, and remediation_plan from ServiceNow tables (sn_grc_issue and related tables), which are user/outsider-authored records submitted into the monitored system rather than trusted first-party provider text.