pp-gmail

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow uses Gmail APIs and CLI commands to read and clean up emails from a user's mailbox, which ingests outsider-authored free text (email bodies and messages sent by external parties).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs the agent to install an external Go package repository using go install github.com/mvanhorn/printing-press-library/library/productivity/gmail/cmd/gmail-pp-cli@latest and an npm package via npx -y @mvanhorn/printing-press-library install gmail --cli-only, creating common/reputable unofficial operational dependencies.