terraform-data-infrastructure

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Source is the Terraform for Data Infrastructure guide itself, and the only runtime free-text ingestion path shown is reading the generated CI “plan.txt” from the repository workspace to create a GitHub PR comment; that text is produced internally by terraform plan rather than directly from arbitrary outsider-authored content being monitored/consumed by the workflow.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). Helm releases in the module fetch charts from "https://airflow.apache.org" and "https://charts.helm.sh/stable" at runtime, and the Airflow gitSync configuration points to "https://github.com/org/airflow-dags.git" to clone DAGs — all are runtime fetches of remote code/templates that will be executed by the deployed system.