flash

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Runtime path: flash dev continuously streams the remote worker’s live logs to the local terminal, and those logs can include arbitrary free-text originating from user-supplied request bodies (e.g., echo: data), so an outsider can submit free text via HTTP POST/queue input that the workflow ingests without selecting a specific item first.