salla-app-functions-design

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required runtime workflow ingests the trigger payload.data (event context) into the agent’s LLM context; since this payload.data originates from Salla merchant/customer/storefront events (i.e., not authored by the operating user), it is outsider-authored free text/fields that can include arbitrary strings (e.g., review content, communication content, product/category names) via the event payload path.