rclone

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly reads and inspects arbitrary remote storage (e.g., S3, Cloudflare R2, Google Drive, Dropbox) as part of its required workflow—see the Workflow and scripts/check_setup.sh which run rclone listremotes, rclone lsd/ls and related checks—so untrusted, user/third‑party content from those remotes is ingested and can influence next actions (copy/sync/verify) and tool use.