setup-linux-host-backend

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow queries tenant state using commands like observe content host view and observe datastream list, which return workspace metadata and names that can be set by any user with write access to the tenant.