google-drive-api

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider-authored free text can be ingested when scripts/drive_read.sh downloads/export file content from Google Drive (e.g., Docs/Sheets/Slides via /files/{fileId}/export or binaries via ?alt=media), and that downloaded text/bytes are streamed to stdout and thus can be fed into the agent’s LLM context.