triggers

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). EmailTrigger runtime ingests outsider-authored free text from incoming emails—parsed_email.text_body/html_body (and raw_email as a string or S3 object) are derived from the sender’s message and then passed into the triggered script/LLM context.