api-testing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required runtime workflow for Pact provider verification pulls pact files from an external Pact Broker (pactBrokerUrl: 'https://pact-broker.company.com'), and those broker-delivered pact contents are free-form text/JSON that the verifier ingests into the agent/LLM context (indirect prompt injection risk via untrusted broker content).