spark-persona-sales-rep

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly reads full email bodies and threads from external senders (see SKILL.md instructions like "spark search" which "returns full email bodies" and "spark thread ") and then uses that untrusted, third-party content to summarize, draft replies, and drive actions, enabling indirect prompt injection via email content.