playbook-social-posts

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In clay-workflow.md, Node 2/3/4 performs an async scrape of LinkedIn content from operator-provided profile_url targets and then the workflow agents read and process the scraped post content/text at runtime (skip-filter + line writing), so outsider-authored free text is ingested via the scraped posts themselves.