applying-cms-brand

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow explicitly calls Salesforce CMS tools search_brands and then get_brand_instructions, ingesting promptBody/brand content instructions that are authored by the org’s CMS users, meaning outsider-authored free text can be consumed at runtime via the selected brand content.