cold-outreach

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill’s runtime workflow explicitly requires pulling “the company and contact record from the CRM” and “a recent signal … pulled from their site, posts, or reviews,” which are outsider-authored web/social/site text that the agent would ingest to draft the cold outreach.