sap-api-policy

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill ingests outsider-authored free text only as the user’s scenario facts (the prompt), and its required runtime workflow prioritizes fetching official SAP evidence via tool calls (API Hub/Docs/Notes/Roadmap/ARC-1) with no described mechanism to read arbitrary third-party text feeds/queues without selecting specific official items.