email-writer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). This skill’s required runtime workflow ingests outsider-authored free text when it “reads the most recent thread” / “call transcript or meeting notes” / “email history” (i.e., messages or transcripts written by other people) into the agent context in order to draft replies.