accounting-sync

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly searches and downloads emails and attachments from Gmail (see "3. Search Gmail for Invoices" and "4. Extract and Validate PDFs" using gws gmail commands and vendor gmail_query entries in references/vendors.json), which ingests untrusted third‑party email content and attachments that the agent reads and uses to decide uploads and attachments.