gws

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly reads user-generated content from Gmail, Chat, Drive/Docs/Sheets/Forms (see references/gmail.md, references/chat.md, references/docs.md, references/sheets.md and references/workflows.md) and uses that content in workflows (e.g., +email-to-task, +file-announce, read/reply/forward) so untrusted third-party content can be ingested and materially influence subsequent actions.