auto-logging-email-interactions

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow fetches recent sent/received emails from Gmail and then summarizes/logs email thread content into the agent context, which is outsider-authored free text from other people’s emails (e.g., recipients/senders not chosen by the operating user).