crm-adapter-airtable

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly pulls current Airtable records via the MCP (Procedure step "Pull current Airtable records via MCP into the same shape"), ingesting user-generated third‑party Airtable data which the agent reads and uses to drive diffs, writes, and conflict-resolution decisions, so untrusted content could influence actions.