imap-smtp-email

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). Outsider-authored email body text is fetched at runtime via IMAP (scripts/imap.js → checkEmails/fetchEmail/searchEmails → searchMessages reads msg body streams, then parseEmail uses mailparser.simpleParser and returns parsed.text/parsed.html into the JSON printed to the agent/LLM context).