inbox-providers

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly describes ingesting and processing inbound email from external senders (see "Process inbound email" and provider inbound descriptions for Molted Email, AgentMail, LobsterMail), meaning the agent will read untrusted, user-generated email content delivered via webhooks/polling that can influence its decisions and tool use.