raffle-winner-picker

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly directs the agent to access and ingest user-provided Google Sheets/CSV data (see the "From Google Sheets" example "Pick a random row from this Google Sheet..."), which is untrusted, user-generated content that the agent reads and uses to make selection decisions and follow-up actions.