gog-weekly-digest

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). High risk: the required workflow ingests OUTSIDER-authored free text from the user’s Gmail messages (e.g., email body/threads returned by gog --readonly --gmail-no-send gmail search ... --wrap-untrusted) and from calendar/task content that may include attendee/user-generated descriptions, then summarizes it into the agent’s LLM context.