product-data-cleanup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The SKILL.md workflow explicitly loads and processes user-supplied Google Sheets or sheet URLs ("Master Google Sheet — provide spreadsheet ID or URL" in the Input/Step 1 sections), which are arbitrary third-party/user-generated content that the agent reads and acts on (normalizes fields and can write back), so untrusted content could influence its processing and save actions.