ticket-resolution

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow uses HubSpot CLI commands like hubspot objects list/search and hubspot objects update that ingest ticket records (e.g., subject, content, and other properties) into the agent’s context; those ticket bodies/comments are outsider-authored by external users/customers, so their free text can be read and fed into the LLM via the CLI output.