weekly-digest

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider-authored free text is ingested when the skill runs composio execute GORGIAS_GET_TICKET to fetch “message details” from Gorgias tickets (end-customer/supporter messages written by non-operating-user parties), which then get compiled into the Slack digest and sent to the LLM context for formatting.