Ops Integration Sync
Warn
Audited by Snyk on Mar 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill's HubSpot "pull" action explicitly imports contact data from an external CRM (HubSpot) into the ops table, which means it fetches and interprets user-generated third-party content from HubSpot that could contain instructions affecting subsequent actions.
Audit Metadata