playbook-generation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md describes runtime pattern discovery by querying ServiceNow tables (sys_process_flow, sys_pd_activity, sys_pd_context) for existing playbook content (e.g., name/description/fields) via SN-Query-Table or REST, which can include outsider-authored text if attackers can create/alter those records that the workflow reads.