dialpad

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow uses ClawLink to “find an action” and “describe/run” Dialpad actions, which at runtime necessarily fetches Dialpad action metadata and/or user-facing text from Dialpad (outsider-authored free text) into the agent’s LLM context via the CLI’s readable outputs.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill tells users/agents to run npx @useclawlink/cli (which will fetch and execute remote code from the listed npm package page https://www.npmjs.com/package/@useclawlink/cli) at runtime and the CLI is a required dependency for the skill’s operations.