sales-revenue

Warn

Audited by Snyk on Mar 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill's workflow (SKILL.md and the reference files) explicitly instructs agents to fetch and scrape public third‑party sources — e.g., company websites, LinkedIn, BuiltWith/Wappalyzer, Clearbit/ZoomInfo/Hunter.io, Apollo/Clay enrichment MCPs and dealer-scraper Playwright scripts — and to parse prospect replies (Gmail MCP) to drive scoring, routing, and next actions, so untrusted user-generated content can materially influence agent behavior.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 16, 2026, 10:24 PM
Issues
1