workflows-history

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill’s runtime path calls zapier-sdk --experimental list-workflows, list-workflow-runs, and get-workflow-run to ingest workflow run input/output (free-form text authored by workflow creators/users outside the operating user) into the agent’s LLM context for summarization.