google-drive

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The Google Drive skill and its reference documents guide the agent in discovering, reading, searching, and managing files and decks across Google Drive, Google Docs, Google Sheets, and Google Slides. Since user-created Google Drive files, documents, and spreadsheets can contain arbitrary outsider-authored text that the agent reads at runtime, the skill exposes an indirect prompt injection risk.