expansion-opportunity-analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Skill.md requires the agent to search for and pull deal history from the user-provided {{CRM}} and query monthly usage from {{USAGE_SOURCE}}, meaning outsider-authored free text could be ingested if the CRM/usage system contains user/third-party submitted fields (e.g., deal notes, support/QBR thread text) that are read without first selecting a specific item.