sap-bw-query

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.72). High risk: the required workflow calls bw_resolve_and_validate_spec/bw_describe_provider to fetch InfoProvider metadata at runtime from the connected SAP tenant/provider, and that returned metadata (names/descriptions) is then surfaced into the agent’s LLM context as part of the resolution/validation results, which is outsider-authored content from a non-operating-user system.