gog

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly shows the agent fetching user-generated Google Workspace content (e.g., "gog --account ... gmail search ... --json --wrap-untrusted" and "gog ... docs cat ") and even instructs to parse that content for agent workflows, so untrusted third-party emails/docs/Drive files could carry instructions that materially influence actions.