gws-gmail-watch

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). This skill’s required workflow (“watch for new emails and stream them as NDJSON”) ingests Gmail message content at runtime, which is outsider-authored free text from external correspondents, and that content would be fed into the agent/LLM context via the NDJSON streaming path.