newsletters

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's Step 1 explicitly reads recent newsletter emails from Gmail (user-generated, third-party content) and the agent must interpret that content to extract items, write to Notion, and generate draft posts, so untrusted newsletter content could inject instructions that alter behavior.