gws-korean-setup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). Yes — Phase 5 explicitly instructs installing a public GitHub repo via "npx skills add https://github.com/googleworkspace/cli", which causes the agent (Claude Code) to fetch and install third-party code from an open/public source that can add/modify the agent's available commands and thus materially influence subsequent actions.