playbook-new-in-role

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime, the agent “write the line” step (Clay workflow node 5) ingests first-party-provided but person-derived free text fields from the Prospeo search response (“current_title”, “company_name”, “role_start_month”, “prior_title”) which are ultimately sourced from outsider-authored profiles/lead data, via the workflow’s “User message” constructed as the “Facts: ...” line.