iblai-vibe-workflow

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required runtime workflow fetches workflow definitions via useGetWorkflowsQuery/useGetWorkflowQuery (outsider-authored content from other users’ stored workflows) and then renders that free-text fields (e.g., instructions, expression, userApprovalMessage, etc.) into the node config panel/JSON state that the app would pass to any LLM step.