lead-qualification

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow processes lead lists and LinkedIn profile data from external sources such as Google Sheets and CSV files, but the agent actively fetches specific outsider content rather than monitoring an unselected intake queue.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The script connects to Apify API (https://api.apify.com/v2) and executes a remote actor (supreme_coder~linkedin-profile-scraper) which supplies operational profile data used for lead qualification, but lacks strong first-party publisher authentication making it a weak/unknown third-party operational dependency.