batch-send-drafts

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow calls the Gmail MCP list_drafts/search_threads/get_thread to ingest the body/snippet/headers of Gmail drafts from an external sender (from:tkipper@epiphan.com), which are free-text message content authored by someone other than the operating user and then placed into the agent’s LLM context for classification/table/link generation.