lokalise-migration-deep-dive

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow interacts with external APIs (Crowdin, Phrase, POEditor) to download translation export files and process them locally, but does not monitor or consume an outsider-submitted chat feed, ticket queue, or comment system where an attacker can forcibly deliver prompt injections.