lark-calendar

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow monitors calendar events and lists attendees using tools like lark-cli calendar +search-event and lark-cli calendar +list-attendees, which can ingest outsider-authored free text from calendar summaries and descriptions without the agent first selecting a specific item.