cloudflare-email-service

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.78). Outsider free text is ingested via the Email Routing email() handler: message.raw / message.headers contain the inbound email content authored by an external sender, which the skill instructs to buffer and parse (e.g., with postal-mime) and then potentially store/forward/reply—thereby feeding outsider-authored text into the agent/LLM context if used downstream.