dynamics-365-field-service

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required runtime workflow uses Dataverse Web API calls (e.g., GET .../msdyn_iotalerts?$select=...&$expand=...&$filter=...) that can return outsider-authored free text fields like msdyn_alertdata (raw JSON telemetry) and msdyn_name/descriptions, which are then ingested into the agent’s LLM context via the skill’s output/reporting.