my-brain-is-full-crew

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The Postman agent reads external email bodies and calendar items via Gmail and Google Calendar integration without prior user selection.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs cloning an unverified personal repository (https://github.com/gnekt/My-Brain-Is-Full-Crew.git) and executing an installation script from it, constituting an unofficial operational dependency.