aba-gemini-notebook

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill’s required runtime path is the ABA CLI invoking Gemini Notebook operations (e.g., listing/reading notebooks and sources via aba gnb notebook read/ask and aba gnb notebook source list/add-*), which can ingest outsider-authored free text only when the workflow is explicitly given user-provided text/URLs/files or a user-specified “notebook-id-or-url,” rather than passively monitoring an outsider submission queue/feed.