espocrm

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The EspoCRM integration skill allows the agent to read CRM records, leads, contacts, and emails from an external CRM system where outsiders can submit data, exposing the agent to untrusted external text.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs the installation and execution of an npm package @membranehq/cli, which is an unverified external runtime dependency without a repository locator or official signature.