hellosign

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill's SKILL.md explicitly instructs the agent to fetch and download HelloSign templates and signature-request files via the Membrane connector (e.g., "Download Signature Request Files", "Get Template", "List Templates"), meaning the agent will ingest user-uploaded/third-party document content that could contain untrusted instructions.