receipt-processing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the skill’s runtime workflow, receipt content is acquired from an “email-native extraction tool” over Gmail/Outlook messages (i.e., outsider-authored email bodies/attachments), and the agent then normalizes the extracted receipt fields from that content.