sealos-database

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow ingests outsider-authored free text because it reads and parses files from the user’s project directory (including .env*, *.ts/js/..., docker-compose* and other repo files) via scripts/analyze-project-database.mjs, which can contain attacker-controlled instructions/strings.