azure-kubernetes-app-deploy

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow reads project source/config files locally to perform framework/port/health detection (e.g., package.json, requirements.txt, pyproject.toml, go.mod, *.csproj) and then uses those values to generate manifests, so outsider-authored text submitted via the project repository can be ingested.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The workflow includes a runtime command that fetches and applies remote Kubernetes manifests via kubectl: "kubectl apply -f https://github.com/kubernetes-sigs/gateway-api/releases/latest/download/standard-install.yaml", which downloads and executes external YAML on the cluster at runtime.