crm-integration-weapon

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). This skill’s required workflow includes handling CRM webhooks / payloads (outsider-origin free text) in the sync ingestion path—i.e., Loop 1 “Event ingestion” reads webhook payloads and enqueues/processes them, which is attacker-controlled content.