gohighlevel

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads CRM conversations, opportunities, and messages from GoHighLevel, which can contain outsider-submitted free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill operates a CRM system (GoHighLevel) supporting contacts, conversations, opportunities, calendars, forms, invoices, transactions, and products. Managing invoices, products, and transactions constitutes an indirect financial operation (creating bills/invoices/records for downstream handling). Independent access control is established via a authenticated NotFair PAT (Personal Access Token) connection required by the platform integration.