cowork-setup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Step 3–4 require the agent to use the Google Drive MCP to search/create a Drive folder and to write a Cowork config, which necessarily ingests/operates on Drive-provided metadata and content IDs, and Drive is user-controlled (outsider-authored) even if the skill itself mainly writes configuration.