migrate-to-dataverse

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill reads and processes the runtime-generated .pa.yaml files produced by the sync_canvas MCP tool (“Read every .pa.yaml file produced by sync_canvas”), and those YAML contents can include Power Fx formulas authored by other parties in the coauthoring session (outsider-authored app content), which the agent then ingests as readable text into the LLM context for analysis and rewriting.