email-triage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow ingests the user-provided inbox.csv (email subject, sender, snippet fields) at runtime, and those email contents are outsider-authored free text from other senders, which the script then includes in its LLM-readable output (e.g., render_human() and --json sample subjects/senders).