approval-workflows

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md describes runtime logic that queries ServiceNow approval-related tables via snow_query_table/snow_artifact_manage (e.g., reading sysapproval_approver, sysapproval_rule) based on a provided query, which could cause the agent to ingest outsider-authored text if the attacker can influence what records/fields are returned (e.g., approval comments or rule/script fields) without selecting a specific item.