tanstack-ai

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The required runtime workflow ingests messages from the HTTP request body (const { messages } = await request.json()), which is free-form user-provided text from outside the operating user, and that text is then passed into chat({ messages, ... }) as LLM context.