building-threat-intelligence-enrichment-in-splunk

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow ingests threat intelligence feeds from external sources (such as AlienVault OTX and AbuseIPDB), which contain untrusted outsider-authored content that is consumed at runtime without prior selection.