threat-advisory

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow runs a Python script that calls discover_sbom(client) and generate_daily_advisory(sbom, ...), which at runtime can fetch/query external threat feeds and ingest their free-text advisory content into the generated report that is then printed into the LLM context (indirect prompt-injection risk via outsider-authored web/feed text).