skills/streakyc/googleworkspacecli/gws-workflow-email-to-task/Snyk

gws-workflow-email-to-task

Warn

Audited by Snyk on Jul 15, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.70). SKILL.md indicates the workflow reads Gmail message subject/snippet (outsider-authored email body text) at runtime and uses it as task title/notes, which would be free text originating from non-operating-user senders.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jul 15, 2026, 01:27 PM

Issues

1

Security Audit — snyk — gws-workflow-email-to-task