kotlin-multiplatform-push-notifications

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Runtime outsider free text is ingested via FCM message contents: FirebaseMessagingService.onMessageReceived builds NotificationPayload from RemoteMessage.notification?.title/body and message.data (including deep_link), which are authored by external senders and then passed into the app’s LLM context via the notification-handling flow.