azure-appconfiguration-java

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The skill is an Azure App Configuration Java client that, at runtime, reads configuration values from the user’s Azure App Configuration store via SDK API calls (e.g., getConfigurationSetting, listConfigurationSettings, snapshot listing), and those values are free-form text authored by parties other than the operating user, creating an indirect prompt-injection risk when ingested into the agent’s LLM context.