microsoft-azure-webjobs-extensions-authentication-events-dotnet

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In this skill, the runtime reads event payload data passed into the Entra ID custom authentication extension trigger functions (e.g., OnAttributeCollectionSubmit and OnOtpSend consume request.Data values originating from user/credential flows), so outsider-authored free text can reach the workflow without selecting a specific item first.