Proactive Orchestrator

Warn

Audited by Snyk on Mar 3, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The orchestrator explicitly loads and interprets untrusted public web and social content (e.g., "tier3:linkedin" via Apify LinkedIn Scraper and "tier3:news" via Apify Google Scraper) as part of required workflows such as pre_meeting_90min and stale_deal_revival to generate briefs, re‑engagement drafts, and to trigger follow‑up actions, so third‑party content can materially influence decisions and tool use.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 3, 2026, 11:38 AM