campaign-challenger
Warn
Audited by Snyk on May 27, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.75). The required runtime workflow pulls campaign copy from the La Growth Machine MCP via
get_campaign_messagesand, when empty, reconstructs it from outsider-authored sent conversation text usingget_audience_leads→get_lead_conversations→get_conversation_messages, which can include free-form messages/comments authored by non-operating-user parties.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata