m365-agents-dotnet

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The runtime path /api/messages uses adapter.ProcessAsync(request, response, agent, ct) to ingest the incoming HTTP request body (e.g., chat/user message text) into the agent’s turn context; that free-form message text is authored by an external party (the user/channel), not the operating user.