NadMail

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The agent skill includes an email reader script (scripts/inbox.js) that fetches and reads incoming emails from an external email service API, exposing the agent to outsider-authored free text without requiring the agent to select a specific item first.