soia-dev-drawio-visio-diagrams

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Required workflow parses and converts the user-supplied diagram files (.vsdx/.drawio) and then includes extracted diagram text (potentially containing attacker-controlled free text) into the agent via the script outputs/markdown (e.g., inspector outputs contain “texts” and are printed to stdout).