prompt-engineering-domain-support

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Source and runtime path: the workflow ingests outsider-authored customer text via the {{user message}} input for triage and then uses that data as {{from triage}} to draft replies, so an outsider can submit free text through the ticket intake feed/queue the required workflow monitors.