lead-import

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill reads lead data from local CSV/JSON files or URLs provided by the user, where URLs represent user-selected inputs rather than monitored feeds.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill imports leads into a CRM (Salesforce, HubSpot, Zoho, Pipedrive) and manages data hygiene, scoring, and deduplication. This is an indirect financial operation (creating/updating leads and updating downstream business processes and attribution reporting), classified as indirect. Therefore, access control evaluation is not required.