inbox-zero-manager

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs the agent to "list the latest messages in the inbox using integration tools" and to categorize and draft replies/schedule follow-ups based on email content, which means arbitrary third-party/user-generated emails will be read and can materially influence the agent's actions, enabling indirect prompt injection.