sf-b2c-pwa-kit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow explicitly instructs the runtime to fetch public web pages (e.g., https://developer.salesforce.com/docs/... and GitHub search results) and then use their readable text for documentation/reference, which can include outsider-authored free text that is ingested into the agent’s LLM context.