email-verification

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md describes a runtime workflow that polls and reads actual email inbox contents (sender/subject/body and extracted links) authored by external parties, so outsider-controlled free text in the received email is ingested before the agent selects/filters a specific item.