spark-recipe-priority-tuning

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow explicitly instructs the agent to fetch and "browse priority mail" (e.g., spark emails Inbox --filter "category:priority") and then act on what it finds (mark/unmark contacts as primary/important), meaning it ingests user-generated third-party email content that can materially influence its actions.