microcms-nextjs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow monitors and consumes Webhook payloads from microCMS via a Next.js Route Handler (references/caching.md), which parses outsider-submitted content/metadata (such as article bodies/titles through webhook events or API content). Since an outsider can publish or update content in the CMS that triggers this monitored webhook endpoint, it falls under the medium-risk indirect prompt injection threat model.