career-ops-plugin-gmail

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). At runtime, the required ingest workflow calls the Gmail API (index.mjs:98 and index.mjs:112) to fetch full message payloads and then decodes/reads their email body and headers into variables (index.mjs:117-118, index.mjs:128 via getMessageBody in _helpers.mjs:87-98), which are outsider-authored free text from other senders’ emails.