no-lead-left-behind-lead-treatment-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow ingests “CRM notes, emails, and page content” and reads “CRM records, outreach history, meeting evidence, tracker rows, and collaboration context” via Zapier MCP, which can include outsider-authored free text (e.g., prospect/customer emails or notes) that is treated as untrusted input and becomes LLM-readable context.