imap-smtp-email

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). Outsider-authored email body text is fetched from the user’s IMAP mailbox at runtime (IMAP fetch/search → msg.on("body") → parseEmail() via mailparser.simpleParser), and the resulting text/html/subject/snippet are returned and thus become LLM-readable context.