monday

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). Monday actions are executed via ClawLink, which at runtime will fetch and ingest Monday board/item text (authored by other users/participants) into the agent context as part of “describe”/“run” flows.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs running "npx @useclawlink/cli" which fetches and executes the remote npm package at runtime (see https://www.npmjs.com/package/@useclawlink/cli and https://claw-link.dev), so external code is executed and is required for the agent to operate.