graflow

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Outsider-authored free text can enter the workflow via the manifest.yml webhook trigger body or Slack trigger message text, which is then passed as workflow input to be included in agent.run(input_text) prompts inside StudioAgent tasks.