airtable-flow

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). SKILL.md requires using the Browser to open arbitrary customer/task airtable.com source URLs as “evidence context” (and potentially customer-related URLs in Phase 2), and that fetched free-form page text is then used in the agent’s LLM context—an outsider-authored web content injection surface.