memory-bubbles-ingest

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). Outsider source: the skill reads Gmail message bodies from usebubbles.com (other party’s authored meeting summaries) via gmail_read_message, and that free-form meeting content is extracted and appended into the daily markdown/LLM context.