icp

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL refine step ingests recent deal stage history and win/loss reasons from the user-connected CRM (or asks the user to name specific deals when no CRM is connected), which is outsider-provided free text in fields like win/loss reasons and thus can carry indirect prompt injection into the LLM.