customer-email-draft-threads

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). This workflow explicitly reads Gmail message/thread bodies and treats email content (including quoted text, links, signatures, headers, and attachments) as untrusted input (outsider-authored customer messages) and uses that text to draft and to populate Codex handoff context at runtime.