datapack-builder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Exclusion: The workflow text specifies extracting data from user-uploaded documents, “web search for public filings,” or MCP server data, but the provided file does not define any runtime step where the agent blindly ingests arbitrary outsider-authored free text without first selecting specific items (it mainly describes extraction/formatting of chosen source documents and citations).