the-graph

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required runtime workflow (subgraph indexing), the indexer ingests on-chain event/log data for whatever contracts your subgraph is configured to index, which includes outsider-authored free-text values emitted by contracts (e.g., ERC20 name/symbol as strings read via try_*/contract.try_* and then stored), without any prior selection of a specific trusted item.