imap-smtp-email

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider-authored email body text is fetched from the user’s IMAP mailbox at runtime (e.g., scripts/imap.js → fetchByUids/searchMessages → parseEmail(simpleParser(bodyStr))), and that parsed free text (subject/text/html/snippet) is then emitted into the skill’s JSON output that the agent can place into its LLM context.