google-calendar

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required workflow, a user’s free-text (e.g., the natural-language “quick add” phrase or text search terms) is taken as a tool input (not pre-selecting a specific calendar/event), and then the connector ingests it at runtime for Google Calendar operations like quickAddEvent and event searching via listEvents’ q parameter.