ashbyhq

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill reads job board listings from Ashby via an API integration, which may contain free text descriptions authored by external organizations or job posters.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs the agent to connect a remote MCP server from unbrowse.ai, which provides executable tool definitions and behavior-governing instructions at runtime, representing a common unofficial operational dependency.