deal-momentum-analyzer-skill

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads CRM deals, activity history, and call summaries from HubSpot and Clari, which can contain outsider-authored notes and communications submitted without prior selection.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill analyzes CRM deals, scores momentum, and stages re-engagement emails as Gmail drafts using create_draft. Creating email drafts is an indirect financial operation because it prepares communications for downstream human review and sending rather than directly executing charges, transfers, or purchases. Since it is an indirect operation, no direct financial control evaluation is required.