google-workspace-ops
Warn
Audited by Snyk on Jul 29, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). In the Google Workspace Ops workflow, the runtime path “Find the asset” starts from a Drive search surface and then inspects and summarizes the contents of the selected Google Doc/Sheet/Slides, so outsider-authored text can be ingested if a user causes the agent to search for and select outsider-submitted Drive files.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata