pulumi-migrate-from-discovered-stack

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime the agent reads outsider-authored free text from Pulumi Cloud via GET /api/preview/insights/{orgName}/discovered-stacks/{projectName}/{stackName}/resources, specifically annotation.note, which is user-authored and then used as a “high-priority instruction” during triage/import/refactor decisions.