whatsable

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The SKILL.md explicitly instructs the agent to use the Membrane CLI to connect to the "whatsable" connector and run/list actions that fetch WhatsAble entities (Messages, Contacts, Flows, etc.), which are user-generated/untrusted third-party content the agent is expected to read and could materially influence subsequent actions.