sales-circleback

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly ingests user-generated meeting data (notes, transcripts, actionItems) via Circleback webhooks and the MCP server — see references/circleback-api-reference.md (Webhook API) and SKILL.md Step 3/Step 4 — which the agent is expected to read and act on, so untrusted third‑party content can influence behavior.