microsoft-sharepoint

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The SharePoint skill’s runtime workflow ingests outsider-authored text from the Microsoft Graph API responses to free-text/search queries (e.g., findSites “search by keyword across the tenant” and file/list searches that match “file content”), and that returned content is then provided to the agent for downstream reasoning.