outlook

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow uses Microsoft Graph API to fetch and read email content (including arbitrary message body text authored by other people), which is then ingested into the agent/LLM context when the user runs commands like outlook read <id> or outlook reply <id>.

MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

• Hidden Unicode characters detected (1 type(s) found)