sbom-analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow ingests the provided SBOM file(s) and optional VEX documents (outsider-authored content) as readable JSON/XML/RDF/tag-value text for parsing and interpretation, which can contain attacker-controlled free text fields that the agent will include in its LLM context.