microsoft-docs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow uses microsoft_docs_search and then microsoft_docs_fetch to retrieve full page content from Microsoft Learn URLs at runtime, which is outsider-authored web page text ingested into the agent’s LLM context (even though it’s intended to be official Microsoft content).