basecamp

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). At runtime, the skill uses ClawLink to access Basecamp via browser/OAuth and then fetches Basecamp content (e.g., messages/issues/posts) that is ingested as readable text into the agent’s LLM context; this content is authored by Basecamp users other than the operating user (outsider free text).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs the agent to run "npx @useclawlink/cli" (npm package https://www.npmjs.com/package/@useclawlink/cli), which fetches and executes remote code at runtime and is a required dependency for performing the Basecamp actions.