invoice-organizer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill ingests outsider-authored free text from the content of user-provided invoice files (PDFs/images/email attachments) by extracting their text at runtime (“Extract Information from Each File” → “Use text extraction to read invoice content” / “Read visible text from images”), and that invoice text is authored by external vendors/third parties.