sheets

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads live spreadsheet rows and user-submitted cell data via MCP tools (read_sheet_rows, list_sheet_run_rows), which may contain outsider-authored input.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill documents tools for running paid enrichment and AI columns using credits ("per-row credits", "Billed in credits by usage", "confirmation_token"). These paid operations constitute direct financial exposure (purchasing data enrichments/AI compute). However, access is protected by OAuth sign-in and workspace authorization (compatibility: Requires the hosted MCP at mcp.leadmagic.io (OAuth) and a paid LeadMagic plan, Complete the OAuth sign-in in the browser), establishing qualifying independent access control.