gws-gmail

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). Outsider free text can be provided at runtime via the user-supplied fields materialText (pasted Gmail thread/body) or materialFile/materialUrl (uploaded/downloaded email content) which the skill’s context composer ingests as readable text; if that content includes messages authored by non-operating users, it becomes outsider-authored free text in the LLM context.