cf-access-wall

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime, scripts/setup-access.mjs ingests the locally provided spec.json and uses its free-text fields (e.g., apps[].domain, apps[].name, apps[].allow_emails, and related values) directly to construct Cloudflare API requests, so an outsider who can submit that spec to the workflow could inject arbitrary text into those API calls.