agency-sales-data-extraction-agent

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow ingests and parses Excel files from the monitored directories at runtime (filesystem watcher → read workbook → iterate sheets), and those Excel contents are outsider-authored unless the operating user is the sole author of the files; the skill does not restrict ingestion to user-authored documents.