odoo-agency-fleet-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow fans out across multiple Odoo client instances via cross-instance MCP tools (e.g., list_instances, accounting_health_across_instances, receivable_payable_aging, search_records), and the LLM will ingest the returned per-instance record text/fields from those outsider-authored client databases.