ai-sales-coaching
Warn
Audited by Snyk on Jun 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.65). RUNTIME path: the required workflow accepts user-supplied free text/links via
materialText/materialUrl/materialFile(contextComposer) and forwards them into the LLM context; if the user provides outsider-authored content (e.g., pasted customer emails/notes or scraped public page text via a URL), that free text becomes LLM-readable context, enabling indirect prompt injection.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata