clay-feedback
Warn
Audited by Snyk on Aug 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). SKILL.md’s
clay feedbackworkflow reads arbitrary user-authored feedback text from stdin (and optionally the current conversation transcript) at runtime to send it via the Clay CLI, so outsider free text is ingested directly by the agent.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata