huawei-cloud-dws-mem-diag

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Runtime tool calls ingest outsider-authored free text from memory_diagnose_detail.active_sessions[].query and userName (database users) returned by the DWS Autopilot API/MCP, which includes arbitrary SQL text and user-provided query content into the LLM context for report generation.