revenue-audit
Warn
Audited by Snyk on Sep 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The workflow connects to email service provider (ESP) APIs via Klaviyo, Mailchimp, Rule, and Get a Newsletter tools (
list_flows,list_events,list_profiles,tool_list_automations,tool_list_journeys, etc.), which ingest subscriber-submitted campaign content, subject lines, messages, and feedback from external platform users into the agent's context.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata