process-mining-insights

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow reads process mining case/activity/variant data from ServiceNow tables (e.g., sn_process_mining_variant and sn_process_mining_activity) that can contain outsider-authored free text coming from user activity logs, without first selecting a specific trusted item; it then analyzes fields like deviation_details and activity sequencing to generate insights.