managing-managed-event-subscription

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the “Read” and “Update” workflows, the agent accepts outsider-supplied free text identifiers (Id or DeveloperName) and then “Retrieve and display / read the existing file … current XML content” via those inputs, meaning user-provided text can drive what records’ XML is fetched and ingested at runtime.