freshteam

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). At runtime the agent calls Apideck’s unified HRIS/ATS endpoints (e.g., apideck.hris.employees.list with serviceId: "freshteam"), which fetches Freshteam tenant data from an external third-party system; that returned content is then ingested into the agent’s LLM context as response text (outsider-authored business data from Freshteam).