microsoft-sharepoint

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md describes SharePoint runtime tools that can read files/list items/pages via Graph search/browse operations like findSites/listFolderItems/findFiles/findListItems/getItem/getListItem/getPage, so an outsider’s free text can be ingested as the search/query and used to select which tenant content the tool reads.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The README instructs cloning and running remote code from https://github.com/zapier/connectors.git (git clone ... && npm install && node cli.js), which is a runtime/installation step that fetches and then executes external code, so this is a required runtime external dependency that executes remote code.