custom-visualization-builder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required runtime workflow, the visualization code subscribes to Dashboard Studio-provided free-text data via VisualizationAPI.addDataSourcesListener / useDataSources() and renders it (e.g., from dataSources.primary.data.fields/columns) into the DOM/canvas without any indication that only trusted text is ingested.