entity-driven-ui

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Runtime path ingests provider-returned JSON metadata and row data via fetch(...)/res.json() in the Next.js route and useEntityData, but the only outsider-authored text exposure is whatever the user/tenant controls through the metadata/API responses (not arbitrary free text browsing/email/comment ingestion).