inbox-sweep

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow uses an email connector to monitor and read customer inboxes for batch-processing and drafting replies.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill processes unread customer emails, drafts replies, and handles CRM logging via log-activity or update-opportunity. These operations are indirect financial/administrative actions (creating draft communications and suggesting record updates/logging). There are no direct financial transfer, charge, or trade operations.