twin-inbox-partner

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill description (“inbox partner”) implies it will process the user’s inbox messages, and at runtime those messages are typically free-form text authored by other people (outsider chat/email participants) that the agent would read to triage/draft/flag.