template-personalizer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill calls Clay MCP enrichment tools (e.g., find-and-enrich-company, find-and-enrich-contacts-at-company, ask-question-about-accounts) and then injects the returned enrichment text into the LLM via merge fields like {{recent_achievement}} and {{mutual_connection}}, which are outsider-authored/publicly sourced data not authored by the operating user.