add-gmail-agent

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow uses the Gmail MCP server to read/search emails from the user’s mailbox; those email bodies/attachments are outsider-authored free text (other people’s emails) that the MCP tool returns to the agent at runtime.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The agent runtime launches and relies on an external MCP server (e.g., fetched/installed and executed via the command "npx @gongrzhe/server-gmail-autoauth-mcp"), which executes remote code as a required dependency for the Gmail tools.