google-chat-api

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's interactive bot and webhook handlers explicitly parse untrusted, user-generated JSON from Google Chat (see templates/interactive-bot.ts and templates/webhook-handler.ts where request.json() → event.message.text and event.action.parameters are read) and then use that content to decide responses and invoke API actions (Spaces/Members/Reactions), so third-party content can materially influence behavior.