meeting-scheduler

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). This skill’s runtime workflow reads the user’s calendar events via the Google Calendar/Microsoft 365 connector (list_events), and event fields (e.g., meeting title/description/notes) are ingested as free text into the agent context where it explicitly warns to treat invite content as untrusted (prompt-injection risk).