find-contact

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill explicitly calls Hunter.io APIs in the Procedure (Step 2 Resolve domain and Step 3 Pull contacts using Domain-Search / Company-Enrichment) to ingest public, user-generated contact data which the agent then reads and uses to decide next actions (drafting outreach, appending to CRM), exposing it to untrusted third-party content.