dynamic-tables-tutorial

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill’s runtime workflow loads CSV data from an external S3 stage (COPY INTO menu_raw FROM @tasty_bytes_stage/...), so outsider-authored free-form text (the CSV file contents) is ingested into Snowflake and becomes LLM-readable via subsequent SELECT queries shown to the agent/user.