azure-communication-chat-java

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly reads and processes user-generated chat content from third parties via SDK calls such as threadClient.listMessages() / chatThreadClient.listMessages(), getMessage(), and listChatThreads(), which ingest untrusted messages from chat participants and could carry indirect prompt-injection content.