pp-emailoctopus

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill drives the emailoctopus-pp-cli which queries the external EmailOctopus v2 API and its local synced SQLite store (e.g., campaign reports, contacts, tags as shown in "campaigns digest", "contacts engagement", "contacts bulk-delete" and "automations trigger-batch" examples), so the agent reads and acts on untrusted, user-generated third‑party content from the EmailOctopus service.