crm-journey-architect

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The required runtime workflow includes a mandatory web search for “current email/CRM benchmarks” (public web content) that Claude reads and incorporates into the agent’s context, which is an outsider-authored source via the web search → scraped page text → LLM context path.