using-glean

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The Google Drive link is suspicious because personal file-hosting links are a common vector for distributing executables or password‑protected archives, while the company.glean.com links are internal Glean document URLs (low risk) and expected in this skill's examples.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow routes user questions to Glean MCP tools (e.g., search, read_document, meeting_lookup with extract_transcript), whose runtime responses can include outsider-authored free text such as public web page bodies or Slack/email/meeting transcript content, which the agent then reads and uses in its LLM context.