persona-customer-support

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow is to triage and convert customer emails via gws gmail +triage and gws workflow +email-to-task, which at runtime will ingest free-form email body text authored by external customers into the agent’s LLM context (indirect prompt injection risk).