customer-email-draft-threads

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (medium risk: 0.30). The skill instructs the assistant to repeatedly ping the user every hour until a case is resolved, which constitutes an annoying and persistent harassment/denial-of-service pattern.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow inspects and processes inbound email messages from users, which represent outsider-authored free text ingested automatically during support triage.