play-developer-console

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's workflow explicitly runs the local Play CLI against Google Play (e.g., "play reviews list --limit 5" and "play tracks show production --json"), which fetches user-generated/public Play Store content from the open web that the agent would read and could influence subsequent actions.