mailbox-mining

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime path /gmail → mailbox-mining redact/mine reads mailbox thread content (via /gmail search --hydrate full) and then runs redaction/extraction before writing typed records through /memory, so outsider-authored email can reach the LLM at runtime (even if correspondence/body is dropped for memory).