csv-to-sif

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The SKILL.md explicitly accepts a Google Sheet ID as input ("Google Sheet: /csv-to-sif 1FMScY...") meaning the agent will fetch and parse arbitrary user-generated Google Sheets (untrusted third‑party content) and use that data to map fields and generate SIF output, so remote content can materially influence processing.