ads-lead-capture
Warn
Audited by Snyk on Mar 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly ingests untrusted user-generated content from third-party ad platforms (Meta Lead Ads trigger, Google Ads webhook, TikTok Instant Form webhook) and enrichment sources (Apify, Perplexity) as described in SKILL.md, and that content is parsed and used to score, route, upsert to CRM, and trigger actions—so external content can materially influence agent behavior.
Audit Metadata