gog

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly exposes commands that fetch and display user Google Workspace content (e.g., "gog gmail search", "gog drive search", "gog docs cat", "gog sheets get"), which can include untrusted/user‑generated third‑party content that the agent would read and that could materially influence actions (the doc even notes "Confirm before sending mail or creating events").