google-sheets

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly instructs the agent to read and search arbitrary Google Sheets (e.g., the /get-values, /lookup-row, and /get-sheet-names actions that accept spreadsheet_id), meaning the agent will ingest user-generated third-party sheet content which could contain instructions that influence subsequent behavior.