master-schedule

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). This skill explicitly connects to and reads/writes Google Sheets (see SKILL.md steps that call mcp__google-sheets__list_sheets and the auto-setup/copy flow, and the README/manual-run option "Connect a different sheet (paste URL)"), which can be arbitrary user-provided spreadsheet content (untrusted, user-generated) that other product skills will consume and use to drive actions — enabling indirect prompt-injection via spreadsheet cells.