firebase-realtime-patterns

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The skill’s runtime workflow ingests outsider-authored free text via Firebase Realtime Database reads (e.g., subscribeToRoom() / onValue(ref(db, \rooms/${roomCode}`), ...)anddebugSubscribe()), where room.players.seat*.name` (and any other user-controlled string fields) can contain arbitrary text written by other players, which is then passed into the agent/app LLM context through the callback/logging path.