accounting

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly fetches and parses Google Sheets via the WebFetch CSV export URL (see "Read current expenses" step and Tools & Constraints: WebFetch https://docs.google.com/spreadsheets/d/{SPREADSHEET_ID}/gviz/tq?tqx=out:csv), and uses those user-provided spreadsheet contents to learn vendor/Fund/GL assignment patterns that directly influence proposed expense records and subsequent actions, so arbitrary/untrusted sheet content could inject instructions or manipulate behavior.