website-visitors

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required workflow ingests website-visitor signals from third-party tracking/lead tools (e.g., RB2B/Warmly/Leadfeeder/Clearbit/6sense) that typically include free-form visitor/user text or scraped page content into the agent’s LLM context via alerts/webhooks (e.g., Slack messages or Clay webhook payloads), which are outsider-authored.