salesmsg

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill instructs the agent to list and run Membrane actions against Salesmsg (e.g., "membrane action list" / "membrane action run") to read and manage Conversations and other Salesmsg data, which are third‑party, user‑generated messages that the agent would ingest and could influence subsequent actions.