classify-leads

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill includes scripts/read_sheet.py which fetches arbitrary Google Sheet URLs/IDs (user-provided third‑party content) and that sheet data is fed into classify_leads_llm.py for LLM classification, so untrusted, user-generated content can be read and materially influence model decisions and tool behavior.