iblai-vibe-agent-access

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill adds a Next.js Access tab (AgentAccessTab) that fetches RBAC permissions/users/groups from the provider’s RBAC REST API at runtime and therefore can ingest outsider-authored free text that exists in those tenant-managed records (e.g., user/group names, descriptions) without the workflow selecting a specific item.