dux-soup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs using Membrane to query and proxy to a Dux-Soup connection (e.g., "membrane action list/run" and "membrane request CONNECTION_ID /path/to/endpoint") to fetch LinkedIn/Dux-Soup data (user-generated third-party content) that the agent is expected to read and act on, so that external content could influence subsequent actions.