canvas-course-builder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow (scripts/build_course.py) ingests an outsider-provided course spec (YAML/JSON passed as spec CLI arg) and then sends those free-text fields (e.g., pages.body, assignments.description/message, quiz question_text/answers, module titles) to Canvas via POST/PUT requests without any “trusted selection” step, meaning an outsider can supply arbitrary poison content.