nocobase-portal-manage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). During the “Ordinary UI Build Workflow”, the agent ingests the user’s free-text request and then executes the selected Portal’s build by invoking $nocobase-ui-builder/$nocobase-ai-builder; those skills receive the original request text at runtime without any prior filtering or structured item selection gate.