rag-data-pipeline

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill (“RAG Data Pipeline”) runtime workflow ingests and chunks “Raw Documents (PDF, HTML, MD, DB rows)” provided to the pipeline, which in practice can include outsider-authored content from user-submitted sources (i.e., the pipeline ingests documents before retrieval, and no required workflow restriction to trusted first-party document sources is specified).