gws-hebrew-email-automation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow in Step 4 and Step 8 reads incoming email bodies and metadata using gws gmail users messages list, gws gmail users messages modify, and gws gmail +watch, allowing outsider-authored free text from email messages to enter the agent context.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill automates email operations via the Google Workspace CLI (gws), including drafting and sending emails (gws gmail +send). These operations support business tasks such as sending payment reminders and fee notifications containing Shekel amounts. However, sending emails and reminders constitutes an indirect financial operation (generating and transmitting bills or payment notices for downstream handling). Under the instructions, indirect financial operations evaluate to medium severity.