Add security guidance and least-privilege example to flow YAML template

Pavan Kumar Sadashivrequested to merge
gitlab-community/gitlab-org/gitlab:hrlpavan-589580-add-security-guidance-default-flow-yaml into master

What does this MR do and why?

Updates DEFAULT_FLOW_YML_STRING in ee/app/assets/javascripts/ai/catalog/constants.js to:

  1. Include a top-level security notice warning about untrusted content and prompt injection risks, with a link to the security threats documentation.
  2. Provide a concrete two-agent least-privilege "Documentation Gardener" example (analyze -> report) demonstrating how to separate processing untrusted MR content from acting on the structured summary.

References

How to set up and validate locally

yarn jest ee/spec/frontend/ai/catalog/components/ai_catalog_flow_form_spec.js

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist.

Merge request reports