microsoft-dynamics-365-business-central

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow uses the Membrane CLI to interact with Microsoft Dynamics 365 Business Central data, which involves reading enterprise data (accounts, invoices, orders, customers) that can contain user or outsider-submitted free text.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs the agent to install and execute the Membrane CLI from npm (@membranehq/cli), which is an unspecified package registry locator without a repository URL or verified provenance, satisfying the criteria for a weak/unknown/suspicious runtime operational dependency.