loopify

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly instructs the agent to call and proxy arbitrary Loopify API endpoints (e.g., using "membrane action run" and "membrane request CONNECTION_ID /path/to/endpoint"), meaning the agent will fetch and interpret content from the third‑party Loopify platform (user-generated video/marketing data) which could influence subsequent actions.