pp-outlook-calendar

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill reads calendar event bodies and attachments from the user's Microsoft 365 account (e.g., the prep command returns body excerpts and attachments, and events/attachments commands fetch event content), which are untrusted/user-generated third-party content that an agent is expected to interpret and which could materially influence subsequent actions.