serverless

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow’s runtime handler ingests outsider-authored JSON and file contents directly (e.g., API request body via app.current_event.json_body, and S3 object contents via the s3:ObjectCreated event mapping), without any prior selection/filtering step that would prevent indirect prompt injection.