gemini-enterprise
Warn
Audited by Snyk on Oct 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The workflow interacts with Google's Gemini Enterprise/Discovery Engine API to query data stores and documents, which indexes external content (like GCS files and websites) that can contain untrusted user text retrieved at runtime.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata