what-an-email-reveals

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow ingests outsider-authored email content—specifically when it performs “full mail-header analysis” in Step 5 (“Read the headers, if you have the message”), which includes sender-controlled free text in header fields like Received: and Authentication-Results.