genpark-automated-email-marketing-agent

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow ingests recipient-provided fields (e.g., recipients and RecipientProfile like first_name, company, etc.) from user-supplied data into ContentPersonalizer.personalize(...) and then into generated email bodies/subjects, creating an indirect prompt-injection surface via free-text recipient attributes.