azure-app-onboard

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The deploy workflow ingests outsider-authored free text because it runs health checks by issuing live HTTP GETs against deployed endpoints derived from the (user-provided) app and then inspects the returned response body for error patterns, meaning an outsider who can control the deployed service can feed arbitrary text into the agent at runtime.