gws-sheets-read

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). This skill’s required workflow (“read values from a spreadsheet” via gws sheets +read --spreadsheet <ID> --range <RANGE>) ingests spreadsheet cell body text at runtime, and since the spreadsheet content is not authored by the operating user, it can be outsider-authored free text fed into the agent’s LLM context.