clay-incident-runbook

Warn

Audited by Snyk on May 20, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The runbook explicitly tells the agent to fetch and inspect external Clay resources (e.g., curl to https://www.clay.com and https://status.clay.com in Step 1) and to "Check Clay UI: ... Click cells, read error messages" in Step 2 (and references community.clay.com), meaning it ingests public/user-generated third‑party content that directly influences remediation decisions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 20, 2026, 12:36 AM
Issues
1
Security Audit — snyk — clay-incident-runbook